Microsoft · Security update · September 10, 2019

KB4475590: September 2019 security update

KB4475590, released September 10, 2019, fixes 5 CVEs in Microsoft SharePoint Enterprise Server 2016. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
5
3 rated Critical
Exploited
0
None reported
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.1175
96th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 3 High 2 Routine 0

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2019-1257 Microsoft Office SharePoint Remote Code Execution n/a 0.1175 More likely
Urgent CVE-2019-1295 Microsoft Office SharePoint Remote Code Execution n/a 0.0833 More likely
Urgent CVE-2019-1296 Microsoft Office SharePoint Remote Code Execution n/a 0.0833 More likely
High CVE-2019-1260 Microsoft Office SharePoint Elevation of Privilege n/a 0.0262 Exploitation Less Likely
High CVE-2019-1261 Microsoft Office SharePoint Spoofing n/a 0.0155 Exploitation Less Likely
Showing 1 to 5 of 5 1