3189 matches found
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the update...
Security Updates for Microsoft SharePoint Server Subscription Edition (July 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple security vulnerabilities: - Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows a...
KLA85946 SUI vulnerability in Microsoft Office
A spoofing vulnerability was found in Microsoft SharePoint Server. Malicious users can exploit this vulnerability to spoof user interface, gain privileges. Original advisories CVE-2025-53771 Related products Microsoft-SharePoint CVE list CVE-2025-53771 high KB list 5002759 5002760 5002753 5002754...
Security Updates for Microsoft SharePoint Server 2019
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to...
PT-2025-30222
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server affected versions not specified Description The issue involves improper authentication and path traversal in Microsoft Office SharePoint Server. This allows an unauthorized attacker to perform spoofing over a...
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
PT-2025-30160
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server affected versions not specified Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute arbitra...
KLA85945 ACE vulnerability in Microsoft Office
A remote code execution vulnerability was found in Microsoft SharePoint. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-53770 Related products Microsoft-SharePoint CVE list CVE-2025-53770 critical KB list 500275...
The vulnerability of the Microsoft SharePoint software package, related to improper code generation management, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft SharePoint software package is related to improper code generation management. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
CVE-2025-49701
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-49706 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2025-49704 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-49704 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-49701 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-49701 Microsoft SharePoint Remote Code Execution Vulnerability
...
Description of the security update for SharePoint Enterprise Server 2016: July 8, 2025 (KB5002744)
None None...
Microsoft SharePoint Server Spoofing Vulnerability
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
Microsoft SharePoint Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2025-28601
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint versions prior to the July 2025 patchday. Description An issue exists in Microsoft SharePoint related to improper control of code generation, potentially allowing remote code execution. This vulnerability has been actively...