Microsoft · Security update · May 11, 2021

KB5001916: May 2021 security update

KB5001916, released May 11, 2021, fixes 7 CVEs in Microsoft SharePoint Server 2019. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.5077
98th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 2 High 2 Routine 3

Applies to

Product
Microsoft SharePoint Server 2019

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2021-28474 Microsoft Office SharePoint Remote Code Execution 8.8 0.5077 More likely
Urgent CVE-2021-31181 Microsoft Office SharePoint Remote Code Execution 8.8 0.2901 More likely
High CVE-2021-31172 Microsoft Office SharePoint Spoofing 7.1 0.0181 Exploitation Less Likely
High CVE-2021-28478 Microsoft Office SharePoint Spoofing 7.6 0.0157 Exploitation Less Likely
Routine CVE-2021-31173 Microsoft Office SharePoint Information Disclosure 5.3 0.0208 Exploitation Less Likely
Routine CVE-2021-26418 Microsoft Office SharePoint Spoofing 4.6 0.0124 Exploitation Less Likely
Routine CVE-2021-31171 Microsoft Office SharePoint Information Disclosure 4.1 0.0065 Exploitation Less Likely
Showing 1 to 7 of 7 1