Microsoft Warns SharePoint Zero-Day Persists After 2 Patch Failures
Updated
Updated · The Register · Jun 11
Microsoft Warns SharePoint Zero-Day Persists After 2 Patch Failures
3 articles · Updated · The Register · Jun 11
Summary
On-premises SharePoint is under active zero-day attack after Microsoft patches failed to fully fix the vulnerability, leaving exposed servers still at risk.
2 failed patch attempts are the core issue: the fixes did not close the flaw on self-hosted SharePoint deployments, allowing attackers to keep exploiting the bug.
Microsoft’s warning centers on on-prem SharePoint rather than Microsoft 365, sharpening concern for organizations that run the collaboration software in their own data centers.
The episode adds to pressure on enterprise defenders as attackers increasingly exploit patch gaps quickly, turning incomplete fixes into a second-stage security risk.