CVE-2025-53770

nvd nist nuclei

Published: Jul 20, 2025Modified: Jun 17, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.

Affected (3)

Products: Microsoft: Sharepoint Server

1 product

Sharepoint Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Sharepoint Server	Before 16.0.18526.20508
Microsoft Sharepoint Server	Version 2016
Microsoft Sharepoint Server	Version 2019

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (13)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770

Source: secure@microsoft.com

Vendor Advisory

https://arstechnica.com/security/2025/07/sharepoint-vulnerability-with-9-8-severity-rating-is-under-exploit-across-the-globe/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPress/Media Coverage

https://github.com/kaizensecurity/CVE-2025-53770

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

https://news.ycombinator.com/item?id=44629710

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://research.eye.security/sharepoint-under-siege/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMitigationThird Party Advisory

https://therecord.media/microsoft-sharepoint-zero-day-vulnerability-exploited-globally

Source: af854a3a-2127-422b-91ae-364da2661108

Press/Media Coverage

https://www.bleepingcomputer.com/news/microsoft/microsoft-sharepoint-zero-day-exploited-in-rce-attacks-no-patch-available/

Source: af854a3a-2127-422b-91ae-364da2661108

Press/Media Coverage

https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party AdvisoryUS Government Resource

https://www.darkreading.com/remote-workforce/microsoft-rushes-emergency-fix-exploited-sharepoint-toolshell-flaw

Source: af854a3a-2127-422b-91ae-364da2661108

Press/Media Coverage

https://www.forbes.com/sites/daveywinder/2025/07/20/microsoft-confirms-ongoing-mass-sharepoint-attack---no-patch-available/

Source: af854a3a-2127-422b-91ae-364da2661108

Press/Media Coverage

https://x.com/Shadowserver/status/1946900837306868163

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-53770

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.