Spoofing

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2021-27076

Microsoft SharePoint Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2021-24104

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2021-27076

CVE-2021-27076 is a remote code execution flaw in Microsoft SharePoint Server (2019, 2016, 2013 SP1, Foundation) caused by improper code generation management. Attackers with low privileges can execute arbitrary code. CIRCL records active exploitation since March 2021, with proof-of-concept code ...

CVE-2021-27076 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2021-27076 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2021-27052 Microsoft SharePoint Server Information Disclosure Vulnerability

...

CVE-2021-27052

CVE-2021-27052 is a Microsoft SharePoint Server information disclosure vulnerability affecting SharePoint Server 2016/2019 deployments. Public references in the provided connected data indicate exploitation relates to information disclosure (confidentiality impact) with remediation via security u...

CVE-2021-24104 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2021-24104

CVE-2021-24104 is a spoofing vulnerability in Microsoft SharePoint Server reported across multiple SharePoint releases (2013, 2016, 2019, and related Server deployments). The connected Nessus/NVD entries corroborate that this issue is part of a set of March 2021 security updates and is addressed ...

Microsoft SharePoint InfoPath List Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of InfoPath attachments. Tampering with client-side data can...

Microsoft Issues Security Patches for 89 Flaws — IE 0-Day Under Active Attacks

Microsoft plugged as many as 89 security flaws as part of its monthly Patch Tuesday updates released today, including fixes for an actively exploited zero-day in Internet Explorer that could permit an attacker to run arbitrary code on target machines. Of these flaws, 14 are listed as Critical, an...

Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2021-25708)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Microsoft SharePoint Spoofing Vulnerability (CNVD-2021-48892)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint ...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2021-48891)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Security Update for Microsoft SharePoint Foundation 2013 (KB4493238)

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4493232) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Foundation 2013 (KB4493238) farm-deployment

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4493199) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...