Microsoft Office Information Disclosure Vulnerability

In plain English

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Affected products named by the advisory: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Server 2019; Microsoft SharePoint Server Subscription Edition. Information disclosure can expose data available to the affected component beyond its intended authorization boundary.

Vulnerable items

• Microsoft SharePoint Enterprise Server 2016 — Microsoft SharePoint Enterprise Server 2016 is a Microsoft Server server component identified as affected by the official advisory.
• Microsoft SharePoint Server 2019 — Microsoft SharePoint Server 2019 is a Microsoft Server server component identified as affected by the official advisory.
• Microsoft SharePoint Server Subscription Edition — Microsoft SharePoint Server Subscription Edition is a Microsoft Server server component identified as affected by the official advisory.

Recommended action

Primary action: update to a vendor-listed fixed release: 16.0.5556.1005, 16.110.26061317, 16.0.10417.20153, 16.0.19725.20384.