CVE-2025-47166: Microsoft SharePoint Server Remote Code Execution Vulnerability
Published Jun 10, 2025
·Updated
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Other sources
Microsoft SharePoint Server Remote Code Execution Vulnerability
— Microsoft
Affected Software
6 affected componentsFixes available
Microsoft SharePoint Server Subscription Edition
Microsoft SharePoint Server 2019
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Server<16.0.18526.20396
Microsoft SharePoint Server=2019
Event History
Jun 10, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
DescriptionSeverity
Data Sourced
via NVD·05:23 PM
DescriptionSeverityWeaknessAffected Software
Jul 2, 2025
Exploit Published
12:00 AM
Known Exploited
10:37 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-47166?
CVE-2025-47166 has been assigned a critical severity rating due to the potential for remote code execution.
2
How do I fix CVE-2025-47166?
To mitigate CVE-2025-47166, ensure to apply the latest available patches provided by Microsoft for your affected SharePoint version.
3
Which Microsoft products are affected by CVE-2025-47166?
CVE-2025-47166 affects Microsoft SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.
4
What type of vulnerability is CVE-2025-47166?
CVE-2025-47166 is classified as a deserialization of untrusted data vulnerability.
5
Can an authorized attacker exploit CVE-2025-47166?
Yes, an authorized attacker can exploit CVE-2025-47166 to execute arbitrary code remotely.