CVE-2025

Api.Msrc.Microsoft • November 11, 2025

Share: View original

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities in Microsoft Products Identified A series of vulnerabilities, collectively identified as CVE-2025, have been reported across various Microsoft products, including Windows, Microsoft Office, and SQL Server. These vulnerabilities allow authorized and unauthorized attackers to elevate privileges, execute code, or disclose sensitive information locally and over networks. Key issues include use after free, improper access control, and buffer overflows. 55 sources 14

Extracted Entities

Attack Types (1)

Zero-day Exploit

Platforms (1)

Microsoft Office SharePoint