Critical · published July 20, 2025
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 A crafty deserialization flaw in Microsoft SharePoint Server could let unauthorized attackers execute code remotely — it's a happening party for cybercriminals! 🔥 Think of it like a buffet where the hosts accidentally left the door wide open. Anyone can stroll in, grab whatever they please, and cause chaos without any invitation. If exploited, this vulnerability could allow attackers to run arbitrary code, potentially compromising sensitive data or taking complete control of the SharePoint server. That’s a full-scale invasion of your digital space, and it could lead to devastating data breaches or system crashes. 🚨
Think of it like a buffet where the hosts accidentally left the door wide open. Anyone can stroll in, grab whatever they please, and cause chaos without any invitation. This critical vulnerability arises from deserialization of untrusted data, allowing attackers to execute malicious code over the network without any authentication.
If exploited, this vulnerability could allow attackers to run arbitrary code, potentially compromising sensitive data or taking complete control of the SharePoint server. That’s a full-scale invasion of your digital space, and it could lead to devastating data breaches or system crashes. 🚨 Ensure you implement the provided mitigations from Microsoft immediately while waiting for the comprehensive update. It's crucial to review your SharePoint Server configurations and limit network access to minimize exposure. Stay vigilant and monitor your systems closely! You’ve got this! With prompt action and the right precautions, you can keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/sharepoint_server | < 16.0.18526.20508 | 16.0.18526.20508 |
| microsoft/sharepoint_server | all versions | — |
| microsoft/sharepoint_server | all versions | — |