Microsoft Discloses Two SharePoint Remote Code Execution Vulnerabilities

Microsoft published security advisories for CVE-2025-49704 and CVE-2025-49701, identifying both flaws as Microsoft SharePoint Remote Code Execution vulnerabilities. The entries were added to the Microsoft Security Update Guide, indicating that SharePoint deployments are affected by vulnerabilities that could allow code execution on targeted systems.

The advisories provide formal tracking for two separate SharePoint RCE issues and signal that organizations running Microsoft SharePoint should review the associated update guidance and remediation information for both CVEs. The dual disclosure highlights concurrent risk in a widely used enterprise collaboration platform and raises the urgency for defenders to assess exposure across SharePoint environments.