Description of the security update for SharePoint Enterprise Server 2016: September 8, 2020

🗓️ 08 Sep 2020 07:00:00Reported by MicrosoftType

This security update for SharePoint Enterprise Server 2016 resolves multiple vulnerabilities in Microsoft Office that could lead to remote code execution when opening a specially crafted Office file. It also delivers Feature Pack 2 with SharePoint Framework (SPFx) and features from Feature Pack 1

Reporter	Title	Published	Views	Family All 203
Gitee	Exploit for CVE-2020-1189	14 Sep 202518:19	–	gitee
ATTACKERKB	CVE-2020-1210	11 Sep 202000:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Business Productivity Servers, SharePoint Server, and SharePoint Enterprise Server lies in errors in the mechanism for checking the source code of application packages. This allows attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ASP.NET components of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient input validation, allowing attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in the fact that code loading occurs without any checks for its integrity, allowing attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the software interface of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server’s API packages allows a perpetrator to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors, related to errors in memory object handling, allows attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec