Support.Microsoft Security Updates for SharePoint Servers Address CVE-2025-49706
Article Content
Browse articles 
Microsoft released security updates for SharePoint Enterprise Server 2016 and SharePoint Server 2019 to address CVE-2025-49706. The updates were published on July 8, 2025, and are critical for users running these versions of SharePoint. The vulnerabilities were actively exploited shortly after their disclosure, necessitating prompt application of the updates.
Ask AI about this cluster
Answers cite the sources they use
Updated 221d ago How this analysis works
Timeline
2025-07-08
CVE-2025-49706 published
2025-07-20
First public PoC for CVE-2025-49706
2025-07-22
CVE-2025-49706 added to CISA KEV (active exploitation)
2026-02-27
Security update for SharePoint Server 2019 released
2026-02-28
Security update for SharePoint Enterprise Server 2016 released
More articles in this cluster (2)
Following this threat?
Track CVE-2025-49706 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Warlock Ransomware Targets Critical Infrastructure in Spanish and Portuguese Regions The Warlock ransomware group, tracked as Longlegs or Storm-2603, has targeted critical infrastructure in Portuguese- and Spanish-speaking countries, including a water utility, a telecommunications provider, a regional government body, and an university. Recent attacks exploited vulnerabilities in Microsoft SharePoint… 
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…