CVE-2025-59237CWE-502insecure-deserialization

CVE-2025-59237

High · published October 14, 2025

CVSS v3.1
8.8
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

🚨 An authorized attacker can execute code across the network with a crafted payload in Microsoft Office SharePoint—like a chef slipping in a secret ingredient that completely changes the meal! ⚡ This vulnerability is like a restaurant where an unsuspecting diner can secretly change the recipe by whispering to the chef. If the kitchen isn't careful, that custom order can spoil the whole feast! If exploited, this vulnerability could allow an attacker to execute arbitrary code, potentially compromising the entire SharePoint environment. Imagine someone gaining control of sensitive documents, altering permissions, or even deploying malware—it's absolutely devastating!

Put simply

This vulnerability is like a restaurant where an unsuspecting diner can secretly change the recipe by whispering to the chef. If the kitchen isn't careful, that custom order can spoil the whole feast! The root cause is a deserialization flaw that allows an attacker to manipulate untrusted data, enabling them to run unauthorized code within the SharePoint application.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code, potentially compromising the entire SharePoint environment. Imagine someone gaining control of sensitive documents, altering permissions, or even deploying malware—it's absolutely devastating! To remediate this issue, ensure you apply the latest security patches from Microsoft for SharePoint. Additionally, review your application’s configurations and limit user access to reduce the potential impact of this vulnerability. You've got this! Follow these steps, and you'll secure your SharePoint environment in no time. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02461 · 84.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2025-10-14T21:16Z
Affected products (3)
ProductVersionsFixed in
microsoft/sharepoint_server< 16.0.19127.2026216.0.19127.20262
microsoft/sharepoint_serverall versions—
microsoft/sharepoint_serverall versions—
References (1)
EPSS history
Timeline
  • 14 OCT 17:00Z
    Microsoft SharePoint Remote Code Execution Vulnerability
    cvelistv5