Microsoft SharePoint Zero-Day Vulnerabilities Exploited in Global Cyberattacks In July 2025, Microsoft disclosed active exploitation of critical zero-day vulnerabilities in its on-premises SharePoint Server software, including CVE-2025-53770 (CVSS 9.8) and CVE-2025-53771 (CVSS 6. Communication technology Communities High technology Jul 26, 2025