Microsoft Web Deploy 4.0 — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Web Deploy 4.0, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-53772 — CVSS 8.8 (high): Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.