Microsoft · Security update · December 14, 2021

KB5002055: December 2021 security update

KB5002055, released December 14, 2021, fixes 5 CVEs in Microsoft SharePoint Enterprise Server 2016. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0293
87th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2021-42309 Microsoft Office SharePoint Remote Code Execution 8.8 0.0293 Exploitation Less Likely
High CVE-2021-42294 Microsoft Office SharePoint Remote Code Execution 7.2 0.0231 Exploitation Less Likely
High CVE-2021-43876 Microsoft Office SharePoint Elevation of Privilege 8.8 0.0203 Exploitation Less Likely
High CVE-2021-42320 Microsoft Office SharePoint Spoofing 8.0 0.0160 Exploitation Less Likely
High CVE-2021-43242 Microsoft Office SharePoint Spoofing 7.6 0.0130 Exploitation Less Likely
Showing 1 to 5 of 5 1