Microsoft said exploitation was 'less likely' ... but CISA just added SharePoint RCE to KEV list

CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability patched in May.