Skip to content
OpenAdvisories
Critical 1 exploited CVE MSRC-CVE-2025-53770 1 CVE

Microsoft SharePoint Server Remote Code Execution Vulnerability

Published Jul 8, 2025 · Updated Aug 6, 2025 · Revision 6

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

Details

7/20/2025 Update: Updates are now available for Microsoft SharePoint Server Subscription Edition and Microsoft SharePoint Server 2019.
Why are there no links to the update to protect from this vulnerability?
Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. This page will be updated when an update is available.
If enabling AMSI is not an option, you should remove access to the internet from the SharePoint server. These two options protect from unauthenticated attacks.
No, Microsoft 365 SharePoint Online is not vulnerable to this issue.
Yes, please see Customer guidance for SharePoint vulnerability CVE-2025-53770 for more information.

Are the two new CVEs that were released related to the two SharePoint vulnerabilities that were documented by CVE-2025-49704 and CVE-2025-49706?
Yes, the update for CVE-2025-53770 includes more robust protections than the update for CVE-2025-49704. The update for CVE-2025-53771 includes more robust protections than the update for CVE-2025-49706.

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?
Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

Security updates
16.0.5513.1001 — https://support.microsoft.com/help/5002760
16.0.5513.1001 — https://support.microsoft.com/help/5002759
16.0.10417.20037 — https://www.microsoft.com/en-us/download/details.aspx?id=108286
16.0.10417.20037 — https://support.microsoft.com/help/5002753
16.0.18526.20508 — https://www.microsoft.com/en-us/download/details.aspx?id=108285

Vulnerabilities 1

Revision history

  1. #6

    Acknowledgement added. This is an informational change only.

  2. #5

    Added an FAQ and updated the CVSS score. This is an informational change only.

  3. #3

    The security update is available for Microsoft SharePoint Server Subscription Edition. Microsoft strongly encourages customers running this version of SharePoint to install this update as soon as possible.

  4. #4

    The security update is available for Microsoft SharePoint Server 2019. Microsoft strongly encourages customers running this version of SharePoint to install this update as soon as possible.

  5. #1

    Information published.

  6. #2

    Updated acknowledgment. This is an informational change only.

References