CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks

🗓️ 23 Jul 2025 06:24:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 6 Views

CISA adds two SharePoint flaws to KEV; patches required by July 23, 2025 after exploitation.

Reporter	Title	Published	Views	Family All 233
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	28 Jul 202522:41	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	25 Jul 202520:43	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	21 Jul 202518:43	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	27 Jul 202520:55	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	23 Sep 202519:05	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	26 Jul 202510:54	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	23 Jul 202521:02	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	22 Jul 202522:33	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	2 Aug 202508:00	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	24 Jul 202501:14	–	githubexploit

23 Jul 2025 13:04Current

8.7High risk

Vulners AI Score8.7

CVSS 3.19.8

EPSS0.99983

SSVC

SharePoint vulnerabilities ToolShell chain Chinese hacking groups Linen Typhoon Violet Typhoon patch deadline Known Exploited Vulnerabilities on premises SharePoint authentication bypass remote code execution