Vulnerability Lookup

🛡️ CVE-2025-53770

🔴 CVSS 9.8 — Critical ⚠️ Exploit Public CWE-502 NVD

9.8

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.

Details

Severity CRITICAL

CVSS Score 9.8

CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE CWE-502

Public Exploit ⚠️ Yes

Source NVD

Published 2025-07-20

Updated 2026-06-02

Modified 2025-10-27

Fix URL N/A

Affected Packages

Software	From version	Fixed in
sharepoint-server	—	—

References

Vendor Advisory https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770

Exploit, Press/Media Coverage https://arstechnica.com/security/2025/07/sharepoint-vulnerability-with-9-8-severity-rating-is-under-exploit-across-the-globe/

Exploit https://github.com/kaizensecurity/CVE-2025-53770

Mitigation, Vendor Advisory https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/

Issue Tracking https://news.ycombinator.com/item?id=44629710

Exploit, Mitigation, Third Party Advisory https://research.eye.security/sharepoint-under-siege/

Press/Media Coverage https://therecord.media/microsoft-sharepoint-zero-day-vulnerability-exploited-globally

Press/Media Coverage https://www.bleepingcomputer.com/news/microsoft/microsoft-sharepoint-zero-day-exploited-in-rce-attacks-no-patch-available/

Mailing List, Third Party Advisory, US Government Resource https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770

Press/Media Coverage https://www.darkreading.com/remote-workforce/microsoft-rushes-emergency-fix-exploited-sharepoint-toolshell-flaw

Press/Media Coverage https://www.forbes.com/sites/daveywinder/2025/07/20/microsoft-confirms-ongoing-mass-sharepoint-attack---no-patch-available/

Third Party Advisory https://x.com/Shadowserver/status/1946900837306868163

US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-53770

🔗 NVD 🔗 Mitre

Similar Threats

Site Security Check

Concerned your site may already be targeted?

BotEraser analyzes incoming traffic patterns and helps identify bot behavior consistent with known exploit attempts.

Check My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Concerned your site may already be targeted?

Company

Resources

Services

Trusted

Subscribe