Skip to content
OpenAdvisories
High MSRC-CVE-2025-53771 1 CVE

Microsoft SharePoint Server Spoofing Vulnerability

Published Jul 8, 2025 · Updated Jul 31, 2025 · Revision 10

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Are the two new CVEs that were released related to the two SharePoint vulnerabilities that were documented by CVE-2025-49704 and CVE-2025-49706?
Yes, the update for CVE-2025-53770 includes more robust protections than the update for CVE-2025-49704. The update for CVE-2025-53771 includes more robust protections than the update for CVE-2025-49706.

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?
Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?
Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.

Security updates
16.0.5513.1001 — https://support.microsoft.com/help/5002760
16.0.5513.1001 — https://support.microsoft.com/help/5002759
16.0.10417.20037 — https://www.microsoft.com/en-us/download/details.aspx?id=108286
16.0.10417.20037 — https://support.microsoft.com/help/5002753
16.0.18526.20508 — https://www.microsoft.com/en-us/download/details.aspx?id=108285

Vulnerabilities 1

Revision history

  1. #9

    Updated the executive summary with current information. This is an informational change only.

  2. #10

    Added an FAQ to explain that the security update KB for SharePoint Server 2016 applies to both Microsoft SharePoint Server 2016 and Microsoft SharePoint Enterprise Server 2016. This is an informational change only.

  3. #8

    Corrected the Download and Article links in the Security Updates table. This is an informational change only.

  4. #6

    Updated one or more CVSS scores for the affected products. This is an informational change only.

  5. #7

    Updated CWE value. This is an informational change only.

  6. #3

    The security update is available for Microsoft SharePoint Server Subscription Edition. Microsoft strongly encourages customers running this version of SharePoint to install this update as soon as possible.

  7. #4

    Added an FAQ and updated the CVSS score. This is an informational change only.

  8. #5

    Added an acknowledgement. This is an informational change only.

  9. #1

    Information published.

  10. #2

    The security update is available for Microsoft SharePoint Server 2019. Microsoft strongly encourages customers running this version of SharePoint to install this update as soon as possible.

References