Microsoft SharePoint Server Remote Code Execution Vulnerability

How could an attacker exploit the vulnerability?
An attacker could exploit the vulnerability by exploiting vulnerable APIs through a deserialization of unsafe data input vulnerability. Exploitation of this vulnerability requires that a user access a susceptible API on an affected version of SharePoint with a specially-formatted input file resulting in possible remote code execution on the SharePoint Server.

How could an attacker exploit this vulnerability?
In a network-based attack, an authenticated attacker could execute code remotely within the SharePoint Server.

Security updates
16.0.5422.1000 — https://support.microsoft.com/help/5002517
16.0.10404.20003 — https://support.microsoft.com/help/5002526
16.0.16731.20350 — https://support.microsoft.com/help/5002527