CVE-2025-30378CWE-502

Microsoft SharePoint Server Remote Code Execution Vulnerability

High · published May 13, 2025

CVSS v3.1
7.0
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01417 · 72.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-05-13T16:58Z
EPSS history
Timeline
  • 13 MAY 16:58Z
    Microsoft SharePoint Server Remote Code Execution Vulnerability
    cvelistv5