Microsoft SharePoint Server Remote Code Execution Vulnerability

In plain English

Microsoft SharePoint Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Server 2019; Microsoft SharePoint Server Subscription Edition. Successful exploitation can let an attacker run code in the security context of the affected service or device.

Vulnerable items

• Microsoft SharePoint Enterprise Server 2016 — Microsoft SharePoint Enterprise Server 2016 is a Microsoft Server server component identified as affected by the official advisory.
• Microsoft SharePoint Server 2019 — Microsoft SharePoint Server 2019 is a Microsoft Server server component identified as affected by the official advisory.
• Microsoft SharePoint Server Subscription Edition — Microsoft SharePoint Server Subscription Edition is a Microsoft Server server component identified as affected by the official advisory.

Recommended action

Primary action: update to a vendor-listed fixed release: 16.0.5452.1000, 16.0.10411.20004, 16.0.17328.20362.