9991 matches found
CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability
...
CVE-2025-59245
CVE-2025-59245 is a Microsoft SharePoint Online elevation-of-privilege vulnerability. Connected sources describe the flaw as a code/ deserialization issue in SharePoint Online that could allow an attacker with network access and no user interaction to achieve high-impact permissions escalation (C...
CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability
...
CVE-2025-59245
Microsoft SharePoint Online Elevation of Privilege Vulnerability...
Microsoft SharePoint Online Elevation of Privilege Vulnerability
...
PT-2025-47642
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Online affected versions not specified Description The software contains an elevation of privilege flaw that could allow remote attackers to gain administrative control through unsafe deserialization. The flaw allows...
Microsoft SharePoint 代码问题漏洞
Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. A code issue...
CVE-2025-59245: Deserialization of Untrusted Data
Microsoft SharePoint Online Elevation of Privilege Vulnerability...
Microsoft Patch Tuesday, November 2025 Edition
Microsoft this week pushed security updates to fix more than 60 vulnerabilities in its Windows operating systems and supported software, including at least one zero-day bug that is already being exploited. Microsoft also fixed a glitch that prevented some Windows 10 users from taking advantage of...
November “In the Trend of VM” (#21): vulnerabilities in Windows, SharePoint, Redis, XWiki, Zimbra Collaboration, and Linux
November "In the Trend of VM" 21: vulnerabilities in Windows, SharePoint, Redis, XWiki, Zimbra Collaboration, and Linux. The usual monthly roundup. After several months, here's a big one. Post on Habr rus Post on SecurityLab rus Digest on the PT website rus A total of nine vulnerabilities: RCE -...
Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-29930)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
Security Updates for Microsoft SharePoint Server 2019 (November 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by remote code execution vulnerability: - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Security Updates for Microsoft SharePoint Server 2016 (November 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by remote code execution vulnerability: - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Security Updates for Microsoft SharePoint Server Subscription Edition (November 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by remote code execution vulnerability: - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code ove...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server’s software packages, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
About Remote Code Execution – Microsoft SharePoint “ToolShell” (CVE-2025-49704) vulnerability
About Remote Code Execution - Microsoft SharePoint "ToolShell" CVE-2025-49704 vulnerability. This vulnerability is from the Microsoft's July Patch Tuesday. SharePoint is a web application developed by Microsoft for corporate intranet portals, document management, and collaborative work...
CVE-2025-62204
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Vulnerability of Microsoft Office packages, Microsoft SharePoint, and Microsoft PowerPoint presentation software: This vulnerability arises from allowing operations beyond the buffer boundaries in memory, enabling attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft SharePoint, and Microsoft PowerPoint presentation software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code in the victim's context and gain access to sensitive data. Successful exploitation requires the malicious party to tric...
