VDB
BDU%3A2025-08714
BDU%3A2025-08714
PUBLISHED
CVSS 10 CRITICAL
Уязвимость пакета программ Microsoft SharePoint Server, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp | Microsoft SharePoint Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition |
Timeline
- Jul 20, 2025 PoC Published
- Jul 21, 2025 CVE Published
- Apr 18, 2026 PoC Published
- Aug 7, 2026 CVE Updated
- Oct 7, 2026 Security Advisory
References
- https://github.com/n1chr0x/Zeropoint url
- https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/ advisory
- https://arstechnica.com/security/2025/07/sharepoint-vulnerability-with-9-8-severity-rating-is-under-exploit-across-the-globe/ url
- https://research.eye.security/sharepoint-under-siege/ url