CVE-2025-54897

CVE-2025-54897 is a Microsoft SharePoint remote code execution vulnerability caused by deserialization of untrusted data, enabling an authorized attacker to execute code over the network. The CVSSv3.1 base score is 8.8 ( HIGH ), with network access, low attack complexity, and low privileges requi...

Description of the security update for SharePoint Server Subscription Edition: September 9, 2025 (KB5002784)

Description of the security update for SharePoint Server Subscription Edition: September 9, 2025 KB5002784 Applies To SharePoint Server Subscription Edition Summary Important Prior to installing this Cumulative Update, if you're running the 2013 Style Workflows, you must install the August 2025...