---
id: 7001
title: "SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/sharepoint-vulnerabilities-cve-2025-53770-cve-2025-53771-everything-you-need-to-k"
published_at: "2025-07-21T17:42:00Z"
tags: ["rce", "microsoft", "sharepoint", "vulnerability", "cve-2025-53770", "cve-2025-53771"]
phying_url: "https://phying.com/item/7001"
lang: en
---

# SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know

## Summary

Wiz breaks down the exploited SharePoint ToolShell chain: CVE-2025-53770 (CVSS 9.8 RCE) and CVE-2025-53771 (spoofing) bypass July patches, hit on-prem servers only and demand emergency mitigation.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-07-21T17:42:00Z
- **Original:** https://www.wiz.io/blog/sharepoint-vulnerabilities-cve-2025-53770-cve-2025-53771-everything-you-need-to-k
- **Phying News:** https://phying.com/item/7001