CVE-2025-49706

CVE-2025-49706 is an improper authentication vulnerability in Microsoft SharePoint that is exploited as part of the ToolShell chain to gain unauthenticated access and enable further exploitation (e.g., CVE-2025-53770 RCE). Public sources describe exploitation via ToolPane.aspx to bypass auth, lea...

EUVD-2025-20552

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49706 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2025-49704 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2025-49704

CVE-2025-49704 (SharePoint on‑premises) is part of the ToolShell chain that combines CVE-2025-49706 (authentication bypass) with a deserialization/RCE flaw. Public docs describe unauthenticated or spoofed-access POSTs to ToolPane.aspx, enabling remote code execution and post‑exploitation activity...

EUVD-2025-20554

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-49704 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2025-49701 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2025-49701 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2025-49701

CVE-2025-49701 is a Microsoft SharePoint remote code execution vulnerability caused by improper authorization, enabling an authenticated attacker to execute code over the network. Public advisories confirm impact as remote code execution in SharePoint environments, with patched updates released i...

Description of the security update for SharePoint Server 2019 Language Pack: July 8, 2025 (KB5002739)

None None...

Description of the security update for SharePoint Server 2019: July 8, 2025 (KB5002741)

None None...

Description of the security update for SharePoint Enterprise Server 2016: July 8, 2025 (KB5002744)

None None...

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: July 8, 2025 (KB5002743)

None None...

Description of the security update for SharePoint Server Subscription Edition: July 8, 2025 (KB5002751)

None None...

Microsoft SharePoint Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

Microsoft SharePoint Remote Code Execution Vulnerability

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2025-28598 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: An imprope...

(Pwn2Own) Microsoft SharePoint DataSetSurrogateSelector Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...