Security Updates for Microsoft SharePoint Server Subscription Edition (December 2021)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...

CVE-2021-42320

creationtimestamp| type| source ---|---|--- 2021-12-15 18:20:42+00:00| seen| https://t.me/cibsecurity/34039...

CVE-2021-42320

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2021-42320 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2021-42320

CVE-2021-42320 is a spoofing vulnerability affecting Microsoft SharePoint Server (including Subscription Edition and on-premises releases like 2016/2019). Exploitation could allow an attacker to perform actions with the privileges of another user. Microsoft’s December 2021 security update KB50020...

KLA12389 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...