CVE-2025-53771

🗓️ 20 Jul 2025 22:16:52Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 54 Media mentions👁 289 Views

Vulnerability in Microsoft SharePoint Server allows spoofing attacks on affected systems.

Reporter	Title	Published	Views	Family All 65
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	25 Jul 202520:43	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	26 Jul 202510:54	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	22 Jul 202519:17	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	4 Sep 202519:12	–	githubexploit
Information Security Automation	August Microsoft Patch Tuesday	13 Aug 202522:04	–	avleonov
Information Security Automation	About Remote Code Execution – Microsoft SharePoint “ToolShell” (CVE-2025-49704) vulnerability	13 Nov 202513:56	–	avleonov
Information Security Automation	About Remote Code Execution – Microsoft SharePoint Server “ToolShell” (CVE-2025-53770) vulnerability	22 Jul 202515:18	–	avleonov
Circl	CVE-2025-53771	20 Jul 202506:03	–	circl
CISA	CISA Releases Malware Analysis Report Associated with Microsoft SharePoint Vulnerabilities	6 Aug 202512:00	–	cisa
CNNVD	Microsoft SharePoint Server 授权问题漏洞	20 Jul 202500:00	–	cnnvd

NVD

Vulners

CNA

Node

microsoft sharepoint_serverRange<16.0.18526.20508subscription

microsoft sharepoint_serverMatch2016enterprise

microsoft sharepoint_serverMatch2019

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5513.1001",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10417.20037",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.18526.20508",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53771
bleepingcomputer	www.bleepingcomputer.com/news/microsoft/microsoft-sharepoint-zero-day-exploited-in-rce-attacks-no-patch-available/

13 Feb 2026 19:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.16.5

EPSS0.32155

SSVC