Designated as CVE‑2025‑53771 and CVE‑2025‑53770 , the two vulnerabilities apply only to on‑premises versions of SharePoint, so organizations that run cloud‑based SharePoint Online are unaffected. Also: I replaced my Microsoft account password with a passkey and you should, too Rated as important, CVE‑2025‑53771 is a SharePoint Server spoofing vulnerability, which means attackers can impersonate trusted and legitimate users or reso
