--- title: "Security digest: July 22, 2025" url: https://erroneo.us/security/2025-07-22/ description: "July 22, 2025 vulnerability digest: 6 CISA KEV additions (CrushFTP, Google, Microsoft, SysAid). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2025-07-22 date_modified: 2025-07-22 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: July 22, 2025 6 known exploited (cisa kev) additions. ## Take stock - Do you run any of these? Google Chromium, CrushFTP CrushFTP, Microsoft SharePoint, SysAid SysAid On-Prem. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-07-23. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2025-6558](https://erroneo.us/security/cve/CVE-2025-6558/index.md) Google Chromium: Google Chromium ANGLE and GPU Improper Input Validation Vulnerability (CISA due 2025-08-12) - [CVE-2025-54309](https://erroneo.us/security/cve/CVE-2025-54309/index.md) CrushFTP CrushFTP: CrushFTP Unprotected Alternate Channel Vulnerability (CISA due 2025-08-12) - [CVE-2025-49706](https://erroneo.us/security/cve/CVE-2025-49706/index.md) Microsoft SharePoint: Microsoft SharePoint Improper Authentication Vulnerability (CISA due 2025-07-23) - [CVE-2025-49704](https://erroneo.us/security/cve/CVE-2025-49704/index.md) Microsoft SharePoint: Microsoft SharePoint Code Injection Vulnerability (CISA due 2025-07-23) - [CVE-2025-2776](https://erroneo.us/security/cve/CVE-2025-2776/index.md) SysAid SysAid On-Prem: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability (CISA due 2025-08-12) - [CVE-2025-2775](https://erroneo.us/security/cve/CVE-2025-2775/index.md) SysAid SysAid On-Prem: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability (CISA due 2025-08-12) ## Critical advisories None. --- Source page: https://erroneo.us/security/2025-07-22/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt