CVE-2025-53772
Published: 12 August 2025
Summary
CVE-2025-53772 is a high-severity Deserialization of Untrusted Data (CWE-502) vulnerability in Microsoft Web Deploy 4.0. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 6.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly mitigates the deserialization vulnerability by requiring timely identification, reporting, and application of vendor patches as provided in the MSRC advisory.
Requires validation of untrusted network inputs to Web Deploy to prevent exploitation of unsafe deserialization leading to remote code execution.
Implements memory protections such as DEP and ASLR to mitigate remote code execution resulting from successful deserialization attacks.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Deserialization vulnerability in network-accessible Web Deploy service directly enables unauthenticated or low-priv RCE over the network, mapping to exploitation of public-facing applications.
NVD Description
Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
Deeper analysisAI
CVE-2025-53772 is a deserialization of untrusted data vulnerability (CWE-502) in Web Deploy. Published on 2025-08-12, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact across confidentiality, integrity, and availability.
An authorized attacker with low privileges can exploit this vulnerability over the network with low complexity and no user interaction required. Successful exploitation enables remote code execution on the affected system.
The Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53772 provides guidance on mitigations and available patches.
Details
- CWE(s)