Microsoft · Security update · January 12, 2021

KB4493163: January 2021 security update

KB4493163, released January 12, 2021, fixes 7 CVEs in Microsoft SharePoint Enterprise Server 2016. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.0389
90th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 1 High 4 Routine 2

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2021-1707 Microsoft Office SharePoint Remote Code Execution 8.8 0.0387 More likely
High CVE-2021-1715 Microsoft Office Remote Code Execution 7.8 0.0389 Exploitation Less Likely
High CVE-2021-1716 Microsoft Office Remote Code Execution 7.8 0.0389 Exploitation Less Likely
High CVE-2021-1719 Microsoft Office SharePoint Elevation of Privilege 8.0 0.0240 Exploitation Less Likely
High CVE-2021-1712 Microsoft Office SharePoint Elevation of Privilege 8.0 0.0237 Exploitation Less Likely
Routine CVE-2021-1641 Microsoft Office SharePoint Spoofing 4.6 0.0198 Exploitation Less Likely
Routine CVE-2021-1717 Microsoft Office SharePoint Spoofing 4.6 0.0198 Exploitation Less Likely
Showing 1 to 7 of 7 1