Microsoft · Security update · December 17, 2019

KB4484143: December 2019 security update

KB4484143, released December 17, 2019, fixes 2 CVEs in Microsoft SharePoint Enterprise Server 2016. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0575

93rd percentile

Priority of the 2 CVEs

Patch now 0
                                Urgent 0
                                High 2
                                Routine 0

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
High	CVE-2019-1443	Microsoft Office SharePoint	Information Disclosure	n/a	0.0575	Exploitation Less Likely
High	CVE-2019-1491	Microsoft Office SharePoint	Information Disclosure	n/a	n/a	Exploitation Less Likely