CVE-2025-54897
High · 8.8CVSS
8.8
EPSS
21.7%
Published
Sep 9, 2025
CISA due date
—
The record
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|