Research · Jul 8, 2025 · ZeroDay Catalog
Critical Code Injection Vulnerability Identified in Microsoft SharePoint
A code injection vulnerability has been discovered in Microsoft SharePoint, potentially allowing unauthorized code execution over a network.
What changed
A new vulnerability has been identified in Microsoft SharePoint that permits code injection, which could be exploited by authorized attackers to execute arbitrary code remotely. This vulnerability poses significant risks, especially when combined with other known vulnerabilities.
The vulnerability is linked to CVE-2025-49706 and is associated with a patch bypass for CVE-2025-49704, with updates for CVE-2025-53770 providing enhanced protection.
Who is affected
Organizations utilizing Microsoft SharePoint are at risk, particularly those that have not implemented the latest security updates.
This vulnerability affects various versions of SharePoint Server, making it critical for enterprises to assess their exposure.
- Microsoft SharePoint Server users
- Organizations relying on SharePoint for collaboration and document management
- IT departments managing SharePoint installations
- Any entity that has integrated SharePoint with other applications or services
What to do
It is imperative for affected organizations to apply the latest security patches provided by Microsoft to mitigate the risks associated with this vulnerability.
Regularly review and update security practices to ensure that all systems are protected against potential exploits.
- Implement security updates for CVE-2025-53770 immediately.
- Monitor for any unusual activity within SharePoint environments.
- Conduct vulnerability assessments to identify any other potential weaknesses.
- Stay informed about future updates and patches from Microsoft.