Microsoft · Security update · September 10, 2019

KB4475605: September 2019 security update

KB4475605, released September 10, 2019, fixes 3 CVEs in Microsoft SharePoint Foundation 2010 Service Pack 2. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
3
2 rated Critical
Exploited
0
None reported
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.1175
96th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 2 High 1 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2019-1257 Microsoft Office SharePoint Remote Code Execution n/a 0.1175 More likely
Urgent CVE-2019-1295 Microsoft Office SharePoint Remote Code Execution n/a 0.0833 More likely
High CVE-2019-1260 Microsoft Office SharePoint Elevation of Privilege n/a 0.0262 Exploitation Less Likely
Showing 1 to 3 of 3 1