Remote Code Execution in Microsoft SharePoint by Untrusted Data Deserialization

CVE-2025-47163

What is CVE-2025-47163?

A vulnerability has been identified in Microsoft Office SharePoint that potentially allows an authorized attacker to execute arbitrary code by deserializing untrusted data. This security flaw could lead to significant risks if exploited, enabling malicious actors to execute code remotely over a network, thereby compromising the integrity and confidentiality of the affected system. Organizations utilizing Microsoft SharePoint should evaluate their exposure and implement necessary security measures to mitigate this risk.

References