Patch Tuesday, May 2024 Edition

Microsoft today released updates to fix more than 60 security holes in Windows computers and supported software, including two "zero-day" vulnerabilities in Windows that are already being exploited in active attacks. There are also important security patches available for macOS and Adobe users, a...

Only one critical vulnerability included in May’s Microsoft Patch Tuesday; One other zero-day in DWN Core

After a relatively hefty Microsoft Patch Tuesday in April, this months security update from the company only included one critical vulnerability across its massive suite of products and services. In all, Mays slate of vulnerabilities disclosed by Microsoft included 59 total CVEs, most of which ar...

CVE-2024-30044

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-30044

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2024-30043

Microsoft SharePoint Server Information Disclosure Vulnerability...

CVE-2024-30043

Microsoft SharePoint Server Information Disclosure Vulnerability...

CVE-2024-30043 Microsoft SharePoint Server Information Disclosure Vulnerability

...

CVE-2024-30043

CVE-2024-30043 affects Microsoft SharePoint Server (on-premises) and is caused by improper restriction of XML External Entity (XXE) references, enabling information disclosure. Public details include an XXE exploit example for SharePoint Server 2019 and related advisories. Affected product/versio...

CVE-2024-30043 Microsoft SharePoint Server Information Disclosure Vulnerability

...

CVE-2024-30044 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2024-30044

CVE-2024-30044 is a Microsoft SharePoint Server Remote Code Execution vulnerability reported across multiple feeds. The connected docs identify the affected product as SharePoint Server and describe a remote code execution flaw that could allow an attacker to run arbitrary code on the target syst...

CVE-2024-30044 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Description of the security update for SharePoint Enterprise Server 2016: May 14, 2024 (KB5002598)

None None...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Description of the security update for SharePoint Server 2019: May 14, 2024 (KB5002596)

None None...

Description of the security update for SharePoint Server Subscription Edition: May 14, 2024 (KB5002599)

None None...

Microsoft SharePoint Server Information Disclosure Vulnerability

...

Security Updates for Microsoft SharePoint Server 2016 (May 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Microsoft SharePoint BaseXmlDataSource XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the BaseXmlDataSource class. Due to the improper restriction of XML External...

KLA67391 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited...