high8.8Public exploit code
CVE-2025-47166
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft SharePoint 2019 - NTLM Authentication2025-07-02 · remote · windows
Impact
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Sharepoint Enterprise Server | Version 2016 |
| Microsoft | Sharepoint Server | before 16.0.18526.20396 Version 2019 |