MSRC-CVE-2022-21837 — Microsoft SharePoint Server Remote Code Execution Vulnerability

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit the vulnerability?
An authenticated attacker with access to the domain could perform remote code execution on the SharePoint server to elevate themselves to SharePoint admin.

Security updates
16.0.5266.1000 — https://support.microsoft.com/help/5002113
16.0.10382.20004 — https://support.microsoft.com/help/5002109
16.0.14326.20714 — https://support.microsoft.com/help/5002111
15.0.5415.1000 — https://support.microsoft.com/help/5002127

Vulnerabilities 1

High 8.3

CVE-2022-21837

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Jan 11, 2022

Revision history

2022-01-12 #2
Added an acknowledgement. This is an informational change only.
2022-01-11 #1
Information published.

References

CVE-2022-21837 Microsoft SharePoint Server Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21837
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss