CVE-2025-54897

CVE-2025-54897 is a Microsoft SharePoint remote code execution vulnerability caused by deserialization of untrusted data, enabling an authorized attacker to execute code over the network. The CVSSv3.1 base score is 8.8 ( HIGH ), with network access, low attack complexity, and low privileges requi...

Description of the security update for SharePoint Server Subscription Edition: September 09, 2025 (KB5002784)

Description of the security update for SharePoint Server Subscription Edition: September 09, 2025 KB5002784 Summary Important: Prior to installing this Cumulative Update, if you're running the 2013 Style Workflows, you must install the August 2025 patch for SharePoint Workflow manager to your Far...