CVE-2025-49704 Microsoft SharePoint
Microsoft SharePoint contains a code injection vulnerability that could allow an authorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-49706. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the updates for CVE-2025-53770 include more robust protection than…
- CVSS
- not scored
On CISA’s exploited list
Microsoft SharePoint Code Injection Vulnerability
- Added
- 2025-07-22
- Federal patch deadline
- 2025-07-23
- Ransomware use
- known