ToolShell: Remote Code Execution in Microsoft SharePoint (CVE-2025-53770)

🗓️ 25 Jul 2025 14:17:00Reported by Sergei OkhotinType

wallarmlab

wallarmlab🔗 lab.wallarm.com👁 16 Views

Critical remote code execution vulnerability (CVE-2025-53770) in Microsoft SharePoint affects installations remotely.

Reporter	Title	Published	Views	Family All 167
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	28 Jul 202522:41	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	25 Jul 202520:43	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	21 Jul 202518:43	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	27 Jul 202520:55	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	23 Sep 202519:05	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	26 Jul 202510:54	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	23 Jul 202521:02	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	22 Jul 202522:33	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	2 Aug 202508:00	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	24 Jul 202501:14	–	githubexploit

25 Jul 2025 14:17Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.99982

SSVC

remote code execution microsoft sharepoint insecure deserialization exploitation cvss score 9.8