8935 matches found
First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability
Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability. Of the 96 vulnerabilities, nine are rated Critical and 89 are rated...
The vulnerability in the implementation of the Microsoft.SharePoint.WorkflowActions.SetVariableActivity class in Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft.SharePoint.WorkflowActions.SetVariableActivity class in Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server implementations is related to the ability to restore a random type of .NET object by adding the SetVariableActivity...
Security Updates for Microsoft SharePoint Server 2019 (January 2022)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21837,CVE-2022-21840...
Security Updates for Microsoft SharePoint Server Subscription Edition (January 2022)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft SharePoint Server 2013 (January 2022)
The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21840, CVE-2022-21837...
The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server lies in improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint packages lies in improper code generation management, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server packages is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted request...
Security Updates for Microsoft SharePoint Server 2016 (January 2022)
The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21837, CVE-2022-21840,...
Microsoft & Adobe Patch Tuesday (January 2022) – Microsoft 126 Vulnerabilities with 9 Critical, Adobe 41 Vulnerabilities, 22 critical
Microsoft Patch Tuesday – January 2022 Microsoft patched 126 vulnerabilities in their January 2022 Patch Tuesday release. Out of these, nine are rated as critical severity. As of this writing, none of the 126 vulnerabilities are known to be actively exploited. Microsoft has fixed problems in thei...
Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days
Microsoft has addressed a total of 97 security vulnerabilities in its January 2022 Patch Tuesday update – nine of them rated critical – including six that are listed as publicly known zero-days. The fixes cover a swath of the computing giant’s portfolio, including: Microsoft Windows and Windows...
CVE-2022-21837
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2022-21837
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2022-21837
Microsoft SharePoint Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2022-21837 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2022-21837
CVE-2022-21837 is a remote code execution vulnerability in Microsoft SharePoint Server (on‑prem). Connected sources confirm that exploitation could allow an attacker to run arbitrary code on the SharePoint server (e.g., potentially escalate to SharePoint admin) if the vulnerable SharePoint Server...
Description of the security update for SharePoint Enterprise Server 2013: January 11, 2022 (KB5001995)
None None...
Description of the security update for SharePoint Foundation 2013: January 11, 2022 (KB5002129)
Description of the security update for SharePoint Foundation 2013: January 11, 2022 KB5002129 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-21840. Not...