SharePoint security fixes released with January 2024 PU and offered through Microsoft Update

Below are the security fixes for the SharePoint OnPrem versions released this month.

SharePoint Server 2016:

  • KB 5002541 – SharePoint Server 2016 (language independent)

Microsoft Support recommends to install the complete January 2024 CU for SharePoint 2016 rather than individual security fixes.

SharePoint Server 2019:

  • KB 5002539 – SharePoint Server 2019 (language independent)

Microsoft Support recommends to install the complete January 2024 CU for SharePoint 2019 rather than individual security fixes.

SharePoint Server Subscription Edition:

  • KB 5002540 – SharePoint Server Subscription Edition

This security fix includes the complete January 2024 CU for SharePoint Server Subscription Edition.

Office Online Server:

  • None
See the Security Update Guide below for more details about the relevant fixes:
More information:

Please ensure to have a look at the SharePoint Patching Best Practices before applying new fixes.

 


Security Vulnerabilities fixed in this PU

Vulnerability SP 2016 SP 2019 SP SE OOS Impact Max Severity
CVE-2024-21318 x x x Remote Code Execution Important
See the Security Update Guide below for more details about the relevant fixes:

2 Comments


  1. Hi Stefan, thanks for the news, it’s part of my monthly reading ;-). FYI: Some links in the article are labeled November 2023 CU, but point to January 2024 CU. Regards, Reto

    Reply

    1. Thanks Reto! I fixed the incorrect wording.

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.