CVE-2025-21344: 
vulnerability analysis and mitigation

Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2025-21344) was disclosed on January 14, 2025. The vulnerability affects multiple versions of Microsoft SharePoint Server, including SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition up to version 16.0.17928.20356 (NVD, Microsoft Support).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified under CWE-20 (Improper Input Validation) according to Microsoft's assessment (NVD).

This vulnerability could allow an attacker to execute remote code on affected SharePoint Server installations, potentially compromising the confidentiality, integrity, and availability of the system as indicated by the high ratings in the CVSS score (NVD).

Microsoft has released security updates to address this vulnerability. The fixes are available through Microsoft Update, Microsoft Update Catalog, and Microsoft Download Center. For SharePoint Server Subscription Edition, the security update package build 16.0.17928.20356 (KB5002676) has been released. For SharePoint Enterprise Server 2016, the security update package build 16.0.5483.1001 (KB5002672) is available (Microsoft Support).