Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Added to CISA KEV
CVE-2025-53770
Assessment context
CISA lists it as exploited
No access to your tenant or devices. Every item links to its source. What this means
Week 29 · 14 Jul – 20 Jul 2025 UTC · assess the changes, then plan the next dates.
SecuritySharePoint
Added to CISA KEV
CVE-2025-53770
CISA lists it as exploited
SecurityFortinet
Fortinet · exploited, added to CISA KEV
CVE-2025-25257
CISA lists it as exploited
Message CenterMicrosoft 365 Apps / Microsoft Entra / OneDrive / SharePoint
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Entra, SharePoint Online, Microsoft OneDrive, Microsoft 365 apps
Microsoft marks it a major change
Message CenterMicrosoft 365 Apps
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 for the web, Microsoft 365 apps
Microsoft marks it a major change
Message CenterDefender
Message CenterExchange / Microsoft 365 Apps
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Exchange Online, Microsoft 365 apps
Message CenterMicrosoft 365 Message Center Archive by Merill Fernando
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 for the web
Message CenterViva2 source records
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Viva
Message CenterPower BI
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Power BI
Microsoft marks it a major change
Updates and guidanceAzure Kubernetes Service5 source records
Updates and guidanceAzure4 source records
Updates and guidanceMicrosoft 365 Message Center Archive by Merill Fernando2 source records
Updates and guidanceMicrosoft Graph
Graph announcement · 1 passages · Microsoft Graph changelog
Publisher announcement group; its passages may describe different API changes
Message CenterDynamics 365
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Dynamics 365 Apps
Message CenterExchange
Message CenterMicrosoft 365 Apps
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 for the web, Microsoft 365 apps
Message CenterPlanner
Message Center · Plan for change · Microsoft 365 Message Center Archive by Merill Fernando
Planner
ReleasesDnsClientX
Tool release · DnsClientX package releases
ReleasesGitLab
Tool release · GitLab monthly releases
RoadmapMicrosoft 365 Apps / Microsoft 365 Copilot
Roadmap entry · Microsoft 365 Roadmap · Microsoft 365 Message Center Archive by Merill Fernando
SecurityMicrosoft Edge
Security advisory · Microsoft Edge security release notes
The vendor reports an exploit in the wild
Message CenterTeams2 source records
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Teams
Microsoft marks it a major change
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Teams
Updates and guidanceAzure Arc / Windows Server
Windows news · Windows Server Blog
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.