KEV · Activement exploitée

CVE-2025-53770

CVE-2025-53770 est activement exploitée (catalogue CISA KEV) : sévérité critical (CVSS 9.8), 0 apps suivies concernées, aucune encore exposée en version courante.

Gravité (CVSS): 9.8
Exploitation: Avérée
Apps suivies: 0
Encore exposées: 0

Exploit public : ExploitDB · Nuclei Publié le 2025-07-20

EN Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.
Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild.
Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.

Vecteur d'attaque : Réseau Aucun privilège requis Sans interaction utilisateur

Voir le vecteur CVSS brut

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS 100.00% modèle prédictif ; la CISA constate une exploitation avérée percentile 100.0%

CISA Known Exploited Vulnerability

Ajouté au KEV: 2025-07-20
Deadline remédiation: 2025-07-21
Action requise: Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Ransomware: Oui, campagne ransomware connue

Voir sur NVD ↗ Catalogue CISA KEV ↗ Advisory · msrc.microsoft.com Advisory · research.eye.security