SharePoint security fixes released with February 2020 PU and offered through Microsoft Update

As I received some feedback that I should also add the Urls to the KB articles of the different security fixes I added this information to my blog post.

SharePoint 2010 Suite:

  • none

SharePoint 2013 Suite:

  • KB 4484264 – SharePoint Foundation 2013 (core component)

SharePoint 2016 Suite:

  • KB 4484255 – SharePoint Server 2016 (language independent)

SharePoint 2019 Suite:

  • KB 4484259 – SharePoint Server 2019 (language independent)

Office Online Server:

  • KB 4484254 – Office Online Server
See the Security Update Guide below for more details about the relevant fixes:

More information:

Please ensure to have a look at the SharePoint Patching Best Practices before applying new fixes.
 

13 Comments


  1. Hello Stefan,
    thanks for your post, very usefull!!

    One question….there are, for the month of February, security hotfix for SharePoint Server 2013 SP1 ? ?

    I see only a fix for SharePoint Foundation.. i can install it or for my case is not necessary ?

    I use WSUS for check the new SharePoint and Windows Server fix

    Thank you very much

    Reply

    1. Hi Robert,
      SharePoint Foundation 2013 is an integral part of SharePoint Server 2013.
      That means all SharePoint Foundation 2013 security updates need to be applied on SharePoint Server 2013 as well.
      Cheers,
      Stefan

      Reply

      1. Thank you very much…. in case i dont see this fix on my WSUS i will download and install manually 🙂

        Reply

  2. Thanks for the post Stefan. I have a question about KB 4484263 – SharePoint Server 2013 February 2020 CU

    We have June’2019 CU currently on all our SP 2013 Server farms. Since then, our Qualys Vulnerability management tool has been sending different vulnerabilities(KBs) every month on several servers from several farms we have. Just rechecking about our assumption that this KB 4484263(Feb’2020) will supersede all the previous security vulnerabilities.

    KB 4484264 – SharePoint Foundation 2013 (core component) – Is this needed as well in our case? Would really appreciate your inputs to supersede the security vulnerabilities.

    Reply

    1. Hi Varun,
      4484263 includes all previous and current fixes and security fixes.
      So 4484264 is not required if 4484263 is installed.
      Cheers,
      Stefan

      Reply

      1. Perfect. Appreciate your response Stefan! Happy SharePointing!

        Reply

  3. Hi Stefan,

    I am not seeing any CU patches being released for SharePoint 2010 after Dec 2019. Any update as to when we can expect the next patch or if it will be there anytime soon?

    Reply

    1. Hi Arnab,
      sorry, there is no such information available.
      Cheers,
      Stefan

      Reply

    1. The version number field has been added on feedback from customers and filled for all later CUs.
      You can find older version numbers in my blog posts.

      Reply

      1. Thanks for your reply. I can’t find any blog post about Sharepoint 2016 v 16.0.0.4807 and Sharepoint 2019 v 16.0.0.10337 ? I want to be sure about CVE-2019-0604.

        Reply

          1. Thank you Stefan

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.