← CVE Radar
CVE-2025-53770Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.
9.8 CRITICALEPSS 99.99%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1microsoft (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C |
Details
- CVE ID
- CVE-2025-53770
- Status
- Published
- Assigner (CNA)
- microsoft
- Published
- Jul 20, 2025
- Last modified
- 2026-08-04 03:55 UTC
- Weaknesses
- CWE-502 · Deserialization of Untrusted Data
Affected Products
As published by the CNA in the CVE record.
MicrosoftMicrosoft SharePoint Enterprise Server 20161 version range
- 16.0.0 before 16.0.5513.1001
MicrosoftMicrosoft SharePoint Server 20191 version range
- 16.0.0 before 16.0.10417.20037
MicrosoftMicrosoft SharePoint Server Subscription Edition1 version range
- 16.0.0 before 16.0.18526.20508
References
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS