Critical Code Injection Vulnerability Discovered in Microsoft SharePoint

What changed

Microsoft has reported a critical code injection vulnerability in SharePoint that poses a risk of unauthorized code execution over networks. This vulnerability can potentially be exploited by attackers with authorized access, making it particularly concerning.

Additionally, this vulnerability may be chained with CVE-2025-49706, amplifying its impact. The recent updates addressing CVE-2025-53770 offer more robust protection compared to earlier patches for CVE-2025-49704.

Who is affected

The vulnerability affects various users and organizations utilizing Microsoft SharePoint, particularly those with network access.

It is critical for organizations to assess their SharePoint deployments to ensure they are not exposed to this vulnerability.

• Microsoft SharePoint Server users
• Organizations relying on SharePoint for collaboration and document management
• IT departments managing SharePoint installations
• Any authorized users with access to SharePoint networks

What to do

Organizations should prioritize applying the latest security updates provided by Microsoft to mitigate the risks associated with this vulnerability.

Regular security assessments and monitoring of SharePoint environments are recommended to detect any unauthorized activities.

• Implement the latest patches for CVE-2025-53770 and related vulnerabilities
• Conduct a thorough review of user access permissions
• Monitor network activity for unusual behavior
• Stay informed about future updates and security advisories from Microsoft