Priority CRITICAL 100KEV
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99999 · Published 2025-07-20 · Fixed in 16.0.5513.1001, 16.0.10417.20037 +1 CWE-502
Priority HIGH 80
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.9989 · Published 2025-07-20 · Fixed in 16.0.5513.1001, 16.0.10417.20037 +1 CWE-287
