CVE-2025-53770

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Aug 4, 2026

Description

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Jul 20, 2025
Last modified
Aug 4, 2026
Added to CISA KEV
Jul 20, 2025
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-537716.5Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.CVE-2025-537728.8Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.CVE-2025-537737.8Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorizCVE-2025-537747.5Microsoft 365 Copilot BizChat Information Disclosure VulnerabilityCVE-2025-537788.8Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.CVE-2025-537797.2Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network.CVE-2025-53786.1A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycCVE-2025-537816.5Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information oCVE-2025-537827.8Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locaCVE-2025-537837.5Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.CVE-2025-537848.4Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-537868.0On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Micro
CVE-2025-53770: Critical severity, CVSS 9.8 | Vulnix