CVE-2025-47166

CVE-2025-47166 is a remote code execution vulnerability in Microsoft SharePoint Server/Office SharePoint caused by deserialization of untrusted data. An authenticated attacker could trigger code execution over the network on the affected server. The entry is tracked with a high CVSS v3.1 base sco...

CVE-2025-47166 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-47163 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2025-47163

CVE-2025-47163 is a Microsoft SharePoint/SharePoint Server remote code execution vulnerability described as a deserialization of untrusted data that could allow an authorized attacker to execute code over a network. The CVE is documented across multiple sources (Microsoft MSRC advisories and CVE ...

CVE-2025-47163 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Description of the security update for SharePoint Enterprise Server 2016 Language Pack: June 10, 2025 (KB5002731)

None None...

Description of the security update for SharePoint Server 2019: June 10, 2025 (KB5002729)

None None...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Description of the security update for SharePoint Enterprise Server 2016: June 10, 2025 (KB5002732)

None None...

Description of the security update for SharePoint Server Subscription Edition: June 10, 2025 (KB5002736)

None None...

Description of the security update for SharePoint Server 2019 Language Pack: June 10, 2025 (KB5002727)

None None...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Office Sharepoint Server SQL注入漏洞

Microsoft SharePoint Server is a groupware for Windows Server made by Microsoft that provides basic portal and corporate intranet functionality. A remote code execution vulnerability exists in Microsoft SharePoint Server, which can be exploited by an attacker to execute arbitrary code on the syst...

PT-2025-24865 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue allows an authorized attacker to execute code over a network due to the deserialization of untrusted data in Microsoft Office SharePoint. Recommendations: At t...

PT-2025-24862

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server affected versions not specified Description The issue involves flaws in the deserialization mechanism within Microsoft...

KLA84759 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Word can be...

Microsoft SharePoint 代码问题漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Security Updates for Microsoft SharePoint Server 2019 (June 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-47163, CVE-2025-47166, CVE-2025-47168, CVE-2025-47169, CVE-2025-47172 %NASLMINLEVEL 70300 C...

PT-2025-24871 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as 'sql injection', which allows an authorized attacker to execute...