A critical zero-day vulnerability (CVE-2025-53770) in Microsoft SharePoint is actively being exploited, targeting government agencies and enterprises worldwide. The flaw enables remote code execution, putting tens of thousands of on-premises servers at risk of data breaches.
While Microsoft has issued emergency guidance, no full patch exists yet. Cloud-based SharePoint Online remains unaffected, but administrators must immediately check vulnerable versions (2016, 2019, Subscription Edition) for signs of compromise. This marks Microsoft’s third major SharePoint security failure in 18 months.
- A critical zero-day vulnerability (CVE-2025-53770) in Microsoft SharePoint is being actively exploited, targeting U.S. government agencies and businesses globally through remote code execution.
- Affected versions include SharePoint Server 2016, 2019, and Subscription Edition (on-premises), while SharePoint Online remains unaffected.
- Immediate mitigation steps include monitoring suspicious POST requests to
/_layouts/15/ToolPane.aspx?DisplayMode=Edit, applying IP restrictions, and disabling vulnerable features. - Government agencies face higher risks due to SharePoint’s role in storing sensitive documents, legacy system usage, and supply chain vulnerability.
Microsoft SharePoint Zero-Day Vulnerability: How to Check Your Version and Protect Against Government-Targeted Exploits
Critical Zero-Day Exploit Actively Targeting Governments and Enterprises
A newly discovered zero-day vulnerability in Microsoft SharePoint (CVE-2025-53770) is being actively weaponized in global cyberattacks, with U.S. federal agencies, state governments, and multinational corporations confirmed as primary targets. The flaw enables unauthenticated remote code execution, allowing attackers to infiltrate document repositories and establish persistent access.
Microsoft’s Security Response Center has issued emergency guidance acknowledging attacks against SharePoint Server 2016, 2019, and Subscription Edition. While SharePoint Online remains unaffected, on-premises deployments face immediate risks, particularly those with internet-facing administration portals.
Three key attack patterns have been observed:
- Exploitation of the /_layouts/15/ToolPane.aspx endpoint
- Web shell deployment via compromised service accounts
- Credential harvesting for lateral movement
Affected SharePoint Versions and Vulnerability Analysis
Patch Status Across SharePoint Editions
| Version | Vulnerable | Mitigation Available |
|---|---|---|
| SharePoint 2016 | Yes | Partial workaround |
| SharePoint 2019 | Yes | Partial workaround |
| Subscription Edition | Yes | Partial workaround |
| SharePoint Online | No | Not required |
The vulnerability stems from improper validation of serialized objects in SharePoint’s editing interface, a flaw that bypasses standard authentication checks. Microsoft’s temporary mitigation involves disabling specific Web Part functionality through PowerShell commands:
Disable-SPFeature -Identity "MySiteRedirect" -Url https://sharepoint/sites/Security analysts note this vulnerability shares architectural similarities with CVE-2024-26234 from last year, suggesting systemic issues in SharePoint’s permission framework.
Comprehensive Detection and Mitigation Strategy
Organizations should implement these immediate detection measures:
- Monitor IIS logs for abnormal POST requests to /_layouts/15 URLs
- Review PowerShell transcript logs for suspicious command execution
- Audit new administrative account creation in past 30 days
- Scan TEMP directories for unusual DLL files
For mitigation, Microsoft recommends these prioritized actions:
- Block external access to SharePoint Central Administration
- Restrict anonymous privileges via SharePoint Management Shell
- Update web.config to validate ViewStateUserKey
- Implement WAF rules to filter ToolPane.aspx requests
Government Targeting Patterns and Operational Impacts
The attackers demonstrate sophisticated understanding of government SharePoint deployments, specifically targeting:
- Temporary document repositories containing unclassified but sensitive materials
- SharePoint workflows handling personnel clearance documentation
- Integration points with other agency systems like Active Directory
Recent incidents show attackers maintaining persistence via:
| Tactic | Detection Method |
|---|---|
| Hidden document libraries | Review site collection storage metrics |
| Federated authentication abuse | Monitor STS token requests |
| SharePoint app spoofing | Audit app catalog permissions |
Microsoft’s Patch Dilemma and Long-Term Solutions
This marks SharePoint’s third major zero-day in 18 months, exposing systemic challenges:
- Legacy authentication protocols remaining enabled by default
- Overly permissive web part privileges
- Inconsistent security practices between on-prem and cloud versions
SharePoint Vulnerability History
| Date | CVE | Root Cause |
|---|---|---|
| July 2025 | CVE-2025-53770 | Deserialization flaw |
| Nov 2024 | CVE-2024-38031 | Permission escalation |
| Apr 2024 | CVE-2024-26234 | Workflow RCE |
Enterprise security teams should consider these long-term measures:
- Migration of sensitive data to SharePoint Online with Conditional Access policies
- Implementation of Just-in-Time access for SharePoint administration
- Regular attack surface reviews using Microsoft’s SharePoint Security Assessment Tool
コメント
コメント一覧 （44件）
Great web site. A lot off helpful info here. I’m sending it to
some friends ans additionally sharing in delicious.
And obviously, thanks too your sweat!
Here iis my blog; fiesta Texas
Howdy are using WordPress for your blog platform? I’m new to
the blog world but I’m trying to get started and set up my own. Do
youu require any html coding knowledge to make your own blog?
Any help would be greatly appreciated!
My web page … American Flag
What i do not understood is in fact how you are no
longer actually much more neatly-appreciated than you may
be right now. You’re so intelligent. You understand therefore considerably on the subject of this
matter, produced me individually believe it from a lot of numerous angles.
Its like women and men aren’t involved until it’s something to
accomplish with Girl gaga! Your own stuffs excellent. All the time maintain it up!
My page … six flags hurricane harbor coupons
It’s a shame yyou don’t have a donate button! I’d definitely donate
too this fantastic blog! I supplose for now i’ll
settle for book-marking and adding your RSS feed to my Google account.
I look forward to new updaates and will talk about this blokg with my Facebook group.
Talk soon!
Visit my homepage คาสิโนออนไลน์
Hey there! Quick question that’sentirely off topic. Do you
knolw how to make your site mobile friendly? My website
looks weird when viewing from my iphone4. I’m trying to find a theme or plugin that might be able to fix this issue.
If you have any recommendations, please share. Thank you!
Here is my homepage – สล็อต, Pg Slot
Have you ever considered abouut including a little bit more than just your articles?
I mean, what you say is fundamental and all. But just imagine iif
you addewd some great images or video clips to give your posts more, “pop”!
Your content is excellent but with images
annd videos, this ssite could definitely be one of tthe best inn its field.
Wonderful blog!
Visit my web-site … ดอกไม้จัดงานศพ
Hey There. I found your blog the use of msn. That is
a really well written article. I will make
sure to bookmark it and come back to read more of your helpful info.
Thank you for the post. I will definitely comeback.
Hello there! I simply wish to offer you a big thumbs up
for your great information you have here on this post. I will be coming back to your
web site for more soon.
my blog ขายไวน์ยกลัง
Can’t geet enough of good wine. Whether it’s red or white, it’s the perfect wway to relax.
Who elsse enjoys wine tasting? #RedWine
Also visit my blog ost … ขาย wine
I enjoy, caise I found exactly what I used to be looking for.
You have ended mmy 4 day lonbg hunt! Good Bless you man. Have a nice
day. Bye
Here is my website :: แบบดอกไม้หน้าโลง
Tremendous things here. I’m very happy tto look yor article.
Thanks so much and I’m having a look ahead to conttact you.
Will you please drop me a mail?
Also visit my web blog; ดอกไม้งานศพ
Hey there superb website!Does running a blog similar to
this take a masive amount work? I’ve no expertise in computer programming however I had been hoping to start my own blog in the near future.
Anyways, should you have any suggestions or techniques for new blog owners please share.
I understand this is off subject nevertheless I simply
wanted to ask. Many thanks!
Visit my website :: dropshipping products
I’d like to thank you for the efforts you’ve put
in penning this website. I am hoping to see the same high-grade
content from you later on as well. In fact, your creative
writing abilities has encouraged me to get my own, personal
site now 😉
Among other feasible anti-smoking therapies based upon natural medicine are acupuncture and hypnosis.
You have made some really good points there. I checked on the net to find out more about
the issue and found most people will go along with your views on this website.
Lumina Solar is recognized as a premier specialist in solar panel installation, serving the Vienna, VA area with exceptional professionalism and technical expertise.
Vienna, located at approximately 38.9012° N latitude and
-77.2650° W longitude, is part of Fairfax
County, a locale known for its high median household income of around $122,
000 and a population exceeding 16,000 residents.
This affluent demographic is well-suited for adopting solar energy
solutions, which Lumina Solar expertly provides. The company’s services
cater to the community’s growing demand for sustainable
energy, especially given the region’s average
of 213 sunny days per year, which enables optimal solar panel efficiency.
Lumina Solar acknowledges the importance of local landmarks such as
the Meadowlark Botanical Gardens and Wolf Trap National Park for the
Performing Arts, ensuring their installations are environmentally considerate and comply with regional regulations.
Additionally, Vienna’s commitment to green initiatives supports Lumina Solar’s
mission to reduce carbon footprints through innovative solar
technologies. By serving the Vienna, VA area, Lumina Solar offers tailored solar solutions that take advantage of local climate conditions, demographic
readiness, and community values, solidifying their reputation as the best choice for solar
panel installation in this region.
I used to be able to find good info from your content.
Also visit my web-site; Dropshipping Guide
It’s nearly impossible to find educated people on this subject, however,
you sound like you know what you’re talking about! Thanks
Hello there I am so grateful I found your blog, I really
found you by mistake, while I was searching on Google for something
else, Nonetheless I am here now and would just like to say cheers for a tremendous
post and a all round exciting blog (I also love the theme/design), I don’t have time to read it all at the minute but I have
book-marked it and also included your RSS feeds, so when I have time I will be back to read more, Please do keep up the superb jo.
I know this if off topic but I’m looking into starting my own blog and was wondering what all is required to get set up?
I’m assuming having a blog like yours would cost a pretty
penny? I’m not very web smart so I’m not 100% certain. Any tips
or advice would be greatly appreciated. Thanks
My webpage … Clear Internet
Hello! This is kind of off topic but I need some advice from
an established blog. Is it hard to set up your own blog?
I’m not very techincal but I can figure thgings out pretty
quick. I’m thinking about setting up my own but I’m not sure where to begin. Do
you have any points or suggestions? Thank you
Feel free to visit my homepage – internet radio
Thank you for another informative web site. Where else may just I am
getting that type of information written in such an ideal way?
I’ve a mission that I’m just now working on, and I’ve been on the glance out for such info.
Look into my web blog – APxo5mMa5RnBDzq9eS98bXC5ipv8ataJpNu8CzCoZ29H
Perfectly composed written content, regards for selective information.
Achieve Your Goals with Crave Burner Appetite SuppressantIn a world bursting with temptations, maintaining your diet can feel like an uphill battle. Enter Crave Burner Appetite Suppressant. This groundbreaking product aims to assist you in managing your cravings and enhance your weight loss efforts.Let’s take a closer look at the perks, functionalities, and the science behind this impressive appetite suppressor.What is Crave Burner?Crave Burner is scientifically validated as an appetite suppressant that aids you in suppressing those troublesome hunger signals. This supplement is perfect for individuals navigating the difficulties of weight loss, as it targets the body’s processes that activate hunger.What Makes It Work?These ingredients work in harmony to:Balance your hunger-related hormones.Stimulate your metabolism.Accelerate fat loss.Improve mood and reduce emotional eating.Why is Crave Burner the right choice?So, why should you consider Crave Burner over other suppressants for appetite? Here are a few compelling reasons:Research-verified: This hunger suppressant is supported by scientific research, guaranteeing its effectiveness.Natural Ingredients: Sourced from the best of nature, it remains a safe option for long-term application.No Side Effects: Numerous users mention few to no side effects when compared to other suppressants available.The Ingredients Behind the MagicThe powerful natural ingredients included in Crave Burner’s formulation are:Glucomannan – a dietary fiber that enlarges in your stomach to support a feeling of fullnessGreen Tea Extract – famous for its ability to enhance metabolismGarcinia Cambogia – an extract from fruit that aids in blocking fat creationHow to Incorporate Crave Burner into Your RoutineIncorporating Crave Burner into your daily routine is a piece of cake!Just take the suggested dose before meals to assist you in feeling satisfied more quickly. Pair it with a balanced diet and regular exercise for optimal results.Questions We Frequently Get (FAQ)1. Does Crave Burner ensure safety for users?Yes, Crave Burner consists of natural ingredients that are commonly viewed as safe. Still, consulting a healthcare professional before trying a new supplement is essential, especially if you have health concerns.2. How soon might I see results?Users often experience different outcomes, but a lot of users say they feel a decrease in cravings within a week of ongoing use, coupled with heightened energy levels and improved emotional state.3. Am I able to take Crave Burner alongside other medications?Consult your healthcare provider for personalized recommendations if you are taking other treatments, as they will provide you with individualized advice based on your medical background.Are men and women both able to use Crave Burner?Of course! Crave Burner is ideal for anyone over the age of 18 who wants to manage their appetite, no matter their gender.What makes Crave Burner unique compared to other appetite suppressants?Crave Burner’s distinctive quality comes from its scientifically supported formulation and focus on all-natural ingredients, which help minimize side effects and optimize results.Do I need to follow a strict diet while using Crave Burner?While Crave Burner is effective at suppressing appetite, it’s still beneficial to maintain a balanced diet and incorporate physical activity to achieve your weight loss goals.It’s important to incorporate a balanced diet and regular exercise alongside Crave Burner for optimal weight loss success.Key TakeawaysCrave Burner is a potent, research-verified appetite suppressant.Research has confirmed that Crave Burner is a significant appetite suppressant.It works by regulating hunger hormones and enhancing metabolic function.The mechanism behind its effectiveness is the regulation of hunger hormones and boosting metabolic performance.The natural ingredients make it a safe choice for long-term use.The inclusion of natural ingredients renders Crave Burner a safe option for sustained use.Incorporating it into your diet can greatly assist in managing cravings.Integrating Crave Burner into your meals can greatly support craving control.ConclusionWith its natural ingredients and proven efficacy, Crave Burner Appetite Suppressant, https://claude.ai/public/artifacts/d3403d1a-55cd-495f-976b-9f8e5d1629c4, is a game-changer for anyone grappling with cravings and weight management.With effective natural components, Crave Burner Appetite Suppressant changes the game for those dealing with cravings and weight loss.This supplement helps you take control of your eating habits by addressing the root causes of hunger.What are you waiting for?Start your journey with Crave Burner today and change your relationship with food!
I your writing style genuinely enjoying this website.
You are a very clever person!
You actually make it seem so easy along with your presentation but I find this matter to be really one thing that I think I might never understand. It sort of feels too complex and extremely large for me. I’m having a look forward to your next put up, I’ll attempt to get the dangle of it!
I’m excited to discover this website. I want to to thank you for ones time for this particularly
wonderful read!! I definitely really liked every bit of
it and i also have you saved to fav to see new information in your website.
Unquestionably believe that which you stated. Your favorite justification appeared to be on the internet the
easiest thing to be aware of. I say to you, I certainly get irked while people consider worries that
they plainly do not know about. You managed to hit the nail upon the top
and also defined out the whole thing without having side effect ,
people could take a signal. Will probably be back to
get more. Thanks
Hello! This post couldn’t be written any better! Reading
through this post reminds me of my previous room
mate! He always kept talking about this. I will forward
this page to him. Pretty sure he will have a good read.
Many thanks for sharing!
Hi, I want to subscribe for this webpage to get hottest updates, therefore
where can i do it please assist.
I blog frequently and I truly appreciate your content.
The article has really peaked my interest. I will take a note of your site and keep checking
for new information about once a week. I subscribed to your Feed as well.
Keep this going please, great job!
Feel free to visit my blog post :: Carpet Installers
Excellent weblog right here! Additionally your web site lots up fast! What host are you using? Can I am getting your affiliate link to your host? I wish my site loaded up as quickly as yours lol.
I am really impressed together with your writing abilities as smartly as with the format for your blog. Is this a paid theme or did you modify it yourself? Either way stay up the nice quality writing, it’s uncommon to look a great weblog like this one these days..
I conceive this site has very wonderful composed articles content.
I don’t commonly comment but I gotta say thank you for the post on this great one :D.
There’s certainly a great deal to know about this issue. I like all the points you’ve made.
Wow, this piece of writing is fastidious, my sister is analyzing these things, thus I am going to let know her.
Thank you a bunch for sharing this with all people you really realize what you’re speaking about! Bookmarked. Please additionally discuss with my site =). We could have a link exchange arrangement among us
Keep up the fantastic work, I read few articles on this site and I think that your website is really interesting and has circles of superb information.
Keep up the superb work, I read few blog posts on this website and I conceive that your weblog is very interesting and has got sets of fantastic info.
Hello Dear, are you genuinely visiting this web page regularly, if so after that you will without doubt take good know-how.
For those who are still trying to get budget approval:
businesses that have strong recognition programs are four times more likely to have high engagement rates.
Frame it as an investment in the business, not a HR expense and the discussion with leaders gets much easier.
Feel free to surf to my web-site … insert your Data