Description of the security update for SharePoint Server Subscription Edition: December 10, 2024 (KB5002658)

🗓️ 10 Dec 2024 08:00:00Reported by MicrosoftType

Security update resolves multiple SharePoint vulnerabilities and fixes nonsecurity issues.

Reporter	Title	Published	Views	Family All 61
Information Security Automation	December Microsoft Patch Tuesday	10 Dec 202423:19	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server’s software packages lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their lack of access control mechanisms, which allows attackers to increase their privileges.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the improper limitation of XML references to external objects, which allows attackers to gain unauthorized access to protected information.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in errors in processing the relative path to the catalog, allowing an attacker to disclose protected information.	16 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-49062	10 Dec 202417:33	–	circl
Circl	CVE-2024-49064	10 Dec 202417:33	–	circl
Circl	CVE-2024-49068	10 Dec 202417:33	–	circl
Circl	CVE-2024-49070	10 Dec 202417:33	–	circl
CNNVD	Microsoft SharePoint 代码问题漏洞	10 Dec 202400:00	–	cnnvd