CVE-2025-53770

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified)

Description An issue exists in the deserialization mechanism of on-premises Microsoft SharePoint Server. Deserialization is the process of converting a serialized object (a byte stream) back into an object in memory. This flaw allows an unauthenticated attacker with network access to upload a serialized .NET object to the server, leading to remote code execution. Real-world incidents of this issue being exploited have been recorded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.