Microsoft Released Emergency Security Update to Patch Critical SharePoint 0-Day Vulnerability
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
Microsoft has issued an urgent security advisory addressing critical zero-day vulnerabilities in on-premises SharePoint Server that attackers are actively exploiting<\/a>.\u00a0<\/p>\n The vulnerabilities, assigned as CVE-2025-53770 and CVE-2025-53771, pose immediate risks to organizations running SharePoint infrastructure and require immediate remediation.<\/p>\n The security flaws specifically target on-premises SharePoint Server installations, while SharePoint Online in Microsoft 365<\/a> remains unaffected.\u00a0<\/p>\n Microsoft\u2019s Security Response Center confirmed that threat actors are actively exploiting these vulnerabilities, which were only partially addressed in the initial July 2025 Security Update.\u00a0<\/p>\n The vulnerabilities enable attackers to achieve remote code execution and potentially compromise entire SharePoint environments.<\/p>\n Security researchers have identified that successful exploitation results in the creation of malicious files such as spinstall0.aspx, which serves as an indicator of compromise.\u00a0<\/p>\n The attack vectors involve sophisticated techniques that bypass traditional security controls, making immediate patching critical for organizational security.<\/p>\nKey Takeaways<\/strong>
1. Active zero-day attacks targeting on-premises SharePoint servers via CVE-2025-53770 and CVE-2025-53771.
2. Apply security updates immediately: KB5002768 (Subscription Edition) or KB5002754 (SharePoint 2019).
3. Microsoft Defender is deployed with threat detection and hunting capabilities.<\/pre>\nZero-Day Vulnerabilities Under Active Exploitation<\/strong><\/h2>\n