Critical Vulnerabilities in Microsoft SharePoint (CERT-EU Security Advisory 2025-027) On July 19, 2025, Microsoft released an out-of-bound advisory addressing two vulnerabilities, one of which being rated as critical and allowing unauthenticated remote attacker to execute arbitrary code on vulnerable systems. This critical flaw is actively being exploited in the wild since at least 18th of July 2025. It is recommended isolating vulnerable system from the Internet, but also from internal systems, and running a compromise assessment before updating. https://www.cert.europa.eu/publications/security-advisories/2025-027/