CVE-2025-49712

High · 8.8

CVSS

8.8

EPSS

20.7%

Published

Aug 12, 2025

CISA due date

—

The record

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Ecosystem	Package	Introduced	Fixed