8.8
High
CVE-2025-53772 Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network
Description
Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Web Deploy 4.0 10.0 | 10.0.2000 → < 10.0.2001 | 10.0.2001 |
References
- Web Deploy Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified