Microsoft SharePoint Improper Authentication Vulnerability

Description

References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49706 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities · Press/Media Coverage
• CISA KEV · CVE-2025-49706

Weitere Schwachstellen in sharepoint enterprise server

• CVE-2025-54905HOCH 7.1Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53736MITTEL 6.2Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53733HOCH 8.4Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-47994HOCH 8.6Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.
• CVE-2025-47172HOCH 8.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized att…