SharePoint security fixes released with May 2024 PU and offered through Microsoft Update

Below are the security fixes for the SharePoint OnPrem versions released this month.

SharePoint Server 2016:

  • KB 5002598 – SharePoint Server 2016 (language independent)

Microsoft Support recommends to install the complete May 2024 CU for SharePoint 2016 rather than individual security fixes.

SharePoint Server 2019:

  • KB 5002596 – SharePoint Server 2019 (language independent)

Microsoft Support recommends to install the complete May 2024 CU for SharePoint 2019 rather than individual security fixes.

SharePoint Server Subscription Edition:

  • KB 5002599 – SharePoint Server Subscription Edition

This security fix includes the complete May 2024 CU for SharePoint Server Subscription Edition.

Office Online Server:

  • KB 5002503 – Office Online Server
See the Security Update Guide below for more details about the relevant fixes:
More information:

Please ensure to have a look at the SharePoint Patching Best Practices before applying new fixes.

 


Security Vulnerabilities fixed in this PU

Vulnerability SP 2016 SP 2019 SP SE OOS Impact Max Severity
CVE-2024-30042 x Remote Code Execution Important
CVE-2024-30043 x x x Information Disclosure Important
CVE-2024-30044 x x x Remote Code Execution Critical
See the Security Update Guide below for more details about the relevant fixes:

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.