SenPatch tracker / CVE reference / CVE-2024-49065
CVE-2024-49065
High severity Microsoft vulnerability, CVSS 8.2. Fixed by 3 Microsoft security updates.
Risk summary
Exploitation and severity
Not in the CISA KEV catalog. EPSS exploit probability 3.2%. CVSS 8.2 (High).
This CVE is among the lower half of tracked Microsoft CVEs by EPSS exploit probability.
What to do
Moderate priority: schedule it in your normal patch cycle. In Intune or Defender, confirm whether the fixing updates KB5002657, KB5002659, KB5002661 are installed across the affected products. Senserva does this automatically across your tenant and flags every missing patch.
Official patch for CVE-2024-49065
Apply the Microsoft security updates below to fix CVE-2024-49065. Each KB page links to the Microsoft Update Catalog download for every affected product.
Affected products
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
Authoritative references
Want every Microsoft CVE and the patches that fix it, ranked by real-world risk? See the Microsoft Patch Tracker.