Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:microsoft:web_deploy:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Remote Code Execution in Microsoft Web Deploy via CVE-2025-53772

An unauthenticated or low-privilege attacker can achieve remote code execution in Microsoft Web Deploy versions prior to 10.0.2001 by exploiting insecure deserialization of the 'MSDeploy.SyncOptions' HTTP header.

Web Deploy remote-code-execution deserialization cve-2025-53772 iis web-deploy
1r 2t 1c