Microsoft · Security update · October 13, 2020

KB4486694: October 2020 security update

KB4486694, released October 13, 2020, fixes 9 CVEs in Microsoft SharePoint Foundation 2013 Service Pack 1. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
9
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.7110
99th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 2 High 3 Routine 4

Applies to

Product
Microsoft SharePoint Foundation 2013 Service Pack 1

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2020-16952 Microsoft Office SharePoint Remote Code Execution 8.6 0.7110 Exploitation Less Likely
Urgent CVE-2020-16951 Microsoft Office SharePoint Remote Code Execution 8.6 0.0143 Exploitation Less Likely
High CVE-2020-16944 Microsoft Office SharePoint Spoofing 8.7 0.0180 Exploitation Less Likely
High CVE-2020-16945 Microsoft Office SharePoint Spoofing 8.7 0.0167 Exploitation Less Likely
High CVE-2020-16946 Microsoft Office SharePoint Spoofing 8.7 0.0161 Exploitation Less Likely
Routine CVE-2020-16948 Microsoft Office SharePoint Information Disclosure 6.5 0.0384 Exploitation Less Likely
Routine CVE-2020-16953 Microsoft Office SharePoint Information Disclosure 6.5 0.0384 Exploitation Less Likely
Routine CVE-2020-16941 Microsoft Office SharePoint Information Disclosure 4.1 0.0090 Exploitation Less Likely
Routine CVE-2020-16942 Microsoft Office SharePoint Information Disclosure 4.1 0.0088 Exploitation Less Likely
Showing 1 to 9 of 9 1