Skip to main content
عربي
logo

NCSC-VD-2507-001-01

Severity Level: Critical

Reference No.: NCSC-VD-2507-001-01

Microsoft

Description

Microsoft has issued emergency security updates to address two zero-day vulnerabilities in SharePoint (CVE-2025-53770 and CVE-2025-53771) that have been actively exploited in “ToolShell” attacks.

CVE-2025-53770: Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2025-53771: Microsoft SharePoint Server Spoofing Vulnerability

Vulnerabilities

  • CVE-2025-53770

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  • CVE-2025-53771

    Microsoft SharePoint Server Spoofing Vulnerability

References