9994 matches found
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2025-53770
CVE-2025-53770 is a critical remote code execution vulnerability in on-premises Microsoft SharePoint Server, achieved via deserialization of untrusted data and an unauthenticated POST to ToolPane.aspx. The attack chain typically bypasses authentication, retrieves MachineKey values from the web.co...
EUVD-2025-23309
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
EUVD-2025-21981
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
EUVD-2025-22538
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
Security Updates for Microsoft SharePoint Server Subscription Edition (July 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple security vulnerabilities: - Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows a...
Microsoft SharePoint Server 授权问题漏洞
SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A spoofing vulnerability exists in...
Security Updates for Microsoft SharePoint Server 2019
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to...
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the update...
CVE-2025-53770: Deserialization of Untrusted Data
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
PT-2025-30222
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper authentication and incorrect limitation of a pathname to a restricted directory, known as path traversal, allow an unauthorized attacker to perform spoofing over ...
CVE-2025-53771: Improper Authentication
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
KLA85946 SUI vulnerability in Microsoft Office
A spoofing vulnerability was found in Microsoft SharePoint Server. Malicious users can exploit this vulnerability to spoof user interface, gain privileges. Original advisories CVE-2025-53771 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code or gain access to sensitive data. Successful exploitation requires the malicious party to trick the victim into openi...
Customer guidance for SharePoint vulnerability CVE-2025-53770
Revision Change Date 1.0 Information published 07/19/25 2.0 Clarified affected SharePoint product in summary 07/20/25 Added fix availability guidance Provided additional protections guidance regarding: Upgrade SharePoint products to supported versions if required Install July 2025 Security Update...
PT-2025-30160
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description An issue exists in the deserialization mechanism of on-premises Microsoft SharePoint Server. Deserialization is the process of converting a serialized object a byte stream...
Microsoft SharePoint Server 安全漏洞
SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A remote code execution vulnerability...
KLA85945 ACE vulnerability in Microsoft Office
A remote code execution vulnerability was found in Microsoft SharePoint. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-53770 Exploitation Public exploits exist for this vulnerability. Malware exists for this...