The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their deserialization mechanism flaws, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Description of the security update for SharePoint Server 2019 Language Pack: September 9, 2025 (KB5002774)

None None...

Description of the security update for SharePoint Server Subscription Edition: September 9, 2025 (KB5002784)

None None...

Description of the security update for SharePoint Server 2019: September 9, 2025 (KB5002775)

None None...

Description of the security update for SharePoint Server 2016: September 9, 2025 (KB5002778)

None None...

Security Updates for Microsoft SharePoint Server 2019 (September 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-54897, CVE-2025-54905 - Information Disclosure Vulnerability CVE-2025-54906 %NASLMINLEVEL 70300...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution Vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security Updates for Microsoft SharePoint Server 2016 (September 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-54897, CVE-2025-54905 - Information Disclosure Vulnerability CVE-2025-54906 %NASLMINLEVEL 70300...

Description of the security update for SharePoint Server 2019 Language Pack: August 12, 2025 (KB5002770)

None None...

Description of the security update for SharePoint Server 2016: August 12, 2025 (KB5002771)

None None...

Description of the security update for SharePoint Server Subscription Edition: August 12, 2025 (KB5002773)

None None...

📄 Microsoft SharePoint Server 2019 16.0.10383.20020 Remote Code Execution

Microsoft SharePoint Server 2019 version 16.0.10383.20020 proof of concept that demonstrates unauthenticated remote code execution by exploiting unsafe deserialization in SharePoint's ToolPane.aspx via the Scorecard:ExcelDataSet control. Exploit Title: Microsoft SharePoint Server 2019 – Remote Co...

Security Updates for Microsoft SharePoint Server 2019 (August 2025)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability. CVE-2025-53760 - Information Disclosure Vulnerability CVE-2025-53736 - Remote Code Execution...

Security Updates for Microsoft SharePoint Server Subscription Edition (August 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by an privilege escalation Vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)

Exploit Title: Microsoft SharePoint Server 2019 – Remote Code Execution RCE Google Dork: intitle:"Microsoft SharePoint" inurl:"/layouts/15/ToolPane.aspx" Date: 2025-08-07 Exploit Author: Agampreet Singh RedRoot Tool Maker – https://github.com/Agampreet-Singh/RedRoot Vendor Homepage:...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-53770 – Microsoft SharePoint Server 2019 Unauthentica...

📄 Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution

This Metasploit module exploits the authentication bypass vulnerabilities CVE-2025-49706 and CVE-2025-53771, and an unsafe deserialization vulnerability CVE-2025-49704, to achieve unauthenticated RCE against a vulnerable Microsoft SharePoint Server. The vulnerability CVE-2025-53770 was disclosed ...

Exploit for Deserialization of Untrusted Data in Microsoft

SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overvi...

Zeroday vulnerabilities discovered in Microsoft SharePoint Server

Microsoft has released information about actively exploited zeroday vulnerabilities in on-premises versions of Microsoft SharePoint Server. SharePoint Online part of Microsoft 365 has not been affected. The zeroday vulnerabilities, marked CVE-2025-53770 and CVE-2025-53771, allow a malicious perso...

Microsoft SharePoint Server Remote Code Execution Vulnerability

SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A remote code execution vulnerability...