Skip to content
5.0 Medium

CVE-2020-16950 An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in…

Description

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how Microsoft SharePoint Server handles objects in memory.</p>

Affected products and versions

Product Affected versions Fixed in
Microsoft SharePoint Server 2019 16.0 16.0.0 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified
The 355 CVEs of Microsoft SharePoint Server 2019 →
Track this CVE