CVE-2025-53770

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server (affected versions not specified)

Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute arbitrary code over a network. The issue occurs because the deserialization mechanism allows an unauthenticated attacker with network access to upload a serialized .NET object to the server for subsequent execution. Real-world exploitation of this issue has been observed in the wild.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.