Description of the security update for SharePoint Server 2019: January 12, 2021

🗓️ 12 Jan 2021 08:00:00Reported by MicrosoftType

mskb

mskb🔗 support.microsoft.com👁 44 Views

Security update resolving Office vulnerabilities, includes nonsecurity fixes for SharePoint Server 201

Reporter	Title	Published	Views	Family All 119
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spoofing attacks.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server are due to insufficient validation of input data, allowing attackers to execute arbitrary code.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server relates to writing outside the buffer, allowing an attacker to execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server arises from insufficient input data validation, allowing attackers to execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spoofing attacks.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to elevate their privileges and execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server programs lies in the insecure management of privileges, allowing attackers to escalate their privileges.	9 Feb 202100:00	–	bdu_fstec
Circl	CVE-2021-1641	12 Jan 202122:54	–	circl
Circl	CVE-2021-1715	12 Jan 202122:54	–	circl
Circl	CVE-2021-1716	12 Jan 202122:54	–	circl

12 Jan 2021 08:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8

CVSS 29.3

EPSS0.03614

sharepoint server 2019 security update microsoft office remote code execution vulnerabilities cve-2021-1641 cve-2021-1707 cve-2021-1712 accessibility issues nonsecurity fixes