Microsoft · Security update · January 8, 2019

KB4461598: January 2019 security update

KB4461598, released January 8, 2019, fixes 4 CVEs in Microsoft SharePoint Enterprise Server 2016. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2197
97th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2019-0585 Microsoft Office Remote Code Execution n/a 0.2197 Exploitation Less Likely
High CVE-2019-0557 Microsoft Office SharePoint Spoofing n/a 0.0207 N/A
High CVE-2019-0558 Microsoft Office SharePoint Spoofing n/a 0.0200 Exploitation Less Likely
High CVE-2019-0562 Microsoft Office SharePoint Elevation of Privilege n/a 0.0166 Exploitation Less Likely
Showing 1 to 4 of 4 1