SharePoint Online
Microsoft 365's intranet and document store, with team sites, pages and shared files.
Open It in the StackIts Layers
Microsoft runs and patches the app and every layer below it, and ToolShell did not affect it. Your risk is identity, sharing and permissions.
The stack runs from the top layer down, as on the topic page. Each layer shows its technology, and the badge beside it says who runs and patches it.
SharePointRun by The Vendor
Who Runs What
Microsoft runs and patches SharePoint and every layer beneath it. You keep charge of the content, the users, sharing and permissions, which is where your risk now sits.
- The Vendor
- Its maker runs it as a service, and you keep charge of your data, users and settings.
Where Its Code Comes From
Microsoft builds and updates the service itself. The only outside code you answer for is what you add, such as SharePoint Framework web parts built from npm packages.
Well-Known Flaws in Its Layers
These are well-known flaws in the technologies this stack is built from. Each CVE id links to its advisory, and the technology's own page says how far that flaw reached.
CVE-2025-53770 (opens in a new tab)2025
ToolShell, in SharePoint
An unauthenticated attacker could run code on an on-premises SharePoint server.