CVE-2025-53771

✓ Confirmed 0-Day
Triaged: March 5, 2026 11 articles
VulnLookup ↗ NVD ↗ MITRE ↗

EPSS Score

Source: FIRST.org · 2026-05-24
44.97%
probability
This CVE has a 44.97% probability of being exploited in the next 30 days.
0% Top 97.6th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

Signal Intelligence

Confidenceⓘ
85%
EPSS 44.97%
Mentions 11
Last Seen Jul 24, 2025

CNA Information

Analyst Note

Article [2] explicitly states 'Microsoft SharePoint zero-day exploited in RCE attacks, no patch available,' confirming active exploitation before patch availability. Article [1] references emergency patches for exploited SharePoint RCE flaws. The 2025 CVE date with concurrent exploitation reports and explicit zero-day language in authoritative sources meets confirmation criteria.

Threat Actors 41

Cobalt
apt_group Financial crime 🇷🇺 RU
APT 28
apt_group Information theft and espionage 🇷🇺 RU
Vicious Panda
apt_group Information theft and espionage 🇨🇳 CN
Hacking Team
apt_group 🇮🇹 IT
SCATTERED SPIDER
apt_group Financial crime 🇺🇸 US
The Shadow Brokers
apt_group 🇷🇺 RU
APT3
apt_group Information theft and espionage 🇨🇳 CN
Infy
apt_group Information theft and espionage 🇮🇷 IR
Group 27
apt_group Information theft and espionage 🇨🇳 CN
[Unnamed group]
apt_group 🇨🇳 CN
FamousSparrow
apt_group Information theft and espionage 🇨🇳 CN
Earth Estries
apt_group Information theft and espionage 🇨🇳 CN
HAFNIUM
apt_group Information theft and espionage 🇨🇳 CN
APT31
apt_group Information theft and espionage 🇨🇳 CN
Earth Alux
apt_group Information theft and espionage 🇨🇳 CN
APT 22
apt_group Information theft and espionage 🇨🇳 CN
Flax Typhoon
apt_group Information theft and espionage 🇨🇳 CN
APT 6
apt_group Information theft and espionage 🇨🇳 CN
UNC215
apt_group Information theft and espionage 🇨🇳 CN
Water Bakunawa
apt_group 🇷🇺 RU
Bitwise Spider
apt_group Financial gain 🇷🇺 RU
The White Company
apt_group Information theft and espionage 🇨🇳 CN
Radio Panda
apt_group Information theft and espionage 🇨🇳 CN
Circles
apt_group Global
Pat Bear
apt_group 🇸🇾 SY
Operation Red Signature
apt_group Information theft and espionage 🇨🇳 CN
Operation Digital Eye
apt_group Information theft and espionage 🇨🇳 CN
Unnamed Actor
apt_group 🇨🇳 CN
Shadow Network
apt_group Information theft and espionage 🇨🇳 CN
Mana Team
apt_group 🇨🇳 CN
Iron Group
apt_group Information theft and espionage 🇨🇳 CN
Redfly
apt_group 🇨🇳 CN
APT 5
apt_group Information theft and espionage 🇨🇳 CN
Cyber Alliance
apt_group 🇺🇦 UA
WildCard
apt_group Information theft and espionage 🇵🇸 PS
Storm-2460
apt_group 🇷🇺 RU
Dust Storm
apt_group Information theft and espionage 🇨🇳 CN
Electric Panda
apt_group 🇨🇳 CN
Storm-0558
apt_group Information theft and espionage 🇨🇳 CN
Dark Partners
apt_group
Union Panda
apt_group 🇨🇳 CN

Triage Info

Decided atMar 05, 2026