Ref# ADV2025_212 | Date: Jul 22nd 2025

---

Microsoft has published a security advisory highlighting vulnerabilities in the following products on July 19th, 2025. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• Microsoft SharePoint Server Subscription Edition – versions prior to KB5002768 

• Microsoft SharePoint Server 2016 (No update available yet) 

• Microsoft SharePoint Server 2019 – versions prior to KB5002754 

For more information on these updates, you can follow these URLs: 

• Customer guidance for SharePoint vulnerability CVE-2025-53770 

• Microsoft SharePoint Server Remote Code Execution Vulnerability – CVE-2025-53770 

• Microsoft SharePoint Server Spoofing Vulnerability – CVE-2025-53771 

• Security Update for Microsoft SharePoint Server Subscription Edition (KB5002768) 

• Security Update for Microsoft SharePoint Server 2019 Core (KB5002754) 

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary. 

PDF Download: Microsoft SharePoint Security Advisory

References 

• Microsoft SharePoint Security Advisory. (July 19th, 2025). Retrieved from Microsoft. https://www.microsoft.com/en-us/download  

• Microsoft SharePoint Security Advisory. (July 21st, 2025). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-av25-433