Security Updates for Microsoft SharePoint Server Subscription Edition (December 2021)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...

Security Updates for Microsoft SharePoint Server 2013 (December 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-43242 ...

CVE-2021-42309

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2021-42309

CVE-2021-42309 is a remote code execution vulnerability in Microsoft SharePoint Server identified across multiple SharePoint versions (2013/2016/2019 and Subscription Edition). Public sources in the connected documents describe an RCE vector that allows an attacker to bypass authentication or exe...

KLA12389 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...