Designated as CVE 2025 53771 and CVE 2025 53770 , the two vulnerabilities apply only to on premises versions of SharePoint, so organizations that run the cloud based SharePoint Online are unaffected. Also: I replaced my Microsoft account password with a passkey and you should, too Rated as important, CVE 2025 53771 is defined as a SharePoint Server spoofing vulnerability, which means that attackers are able to impersonate trusted and legitimate users or resources in a SharePoint enviro
