Description of the security update for SharePoint Foundation 2013: January 9, 2018

Applies to: Microsoft SharePoint Foundation 2013 Service Pack 1


This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2018-0789 and Microsoft Common Vulnerabilities and Exposures CVE-2018-0790.

Note To apply this security update, you must have the release version of Service Pack 1 for Microsoft SharePoint Foundation 2013 installed on the computer.

Improvements and fixes

This security update contains improvements and fixes for the following nonsecurity issues:

  • When you use some custom claims providers, you encounter an exception during the token update.

  • You cannot load EditForm.aspx pages if you use a custom master page that contains allow framing web parts. You also receive the following error message:

  • You may experience data loss when you coauthor Microsoft Word, Excel, or PowerPoint documents. This issue occurs because of a winning strategy that your changes are override by other people who saves the documents last time.

  • When you change the view of an announcement list from current view to summary view, you might receive one of the following error messages:

  • When you add a user to a Microsoft SharePoint group, SharePoint adds the user to "Members" group instead of the group you selected.

How to get and install the update

Method 1: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 2: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see security update deployment information: January 9, 2018.

Security update replacement information

This security update replaces previously released security update KB 4011180.

File hash information

Package Name Package Hash SHA 1 Package Hash SHA 2
sts2013-kb4011653-fullfile-x64-glb.exe 41520F8D46461E41BA00110C5B66E1834B19572F 276AF37616439C6E416D38BB59CEEF32AF99A6F34E2A9C35154EA05CA2F9FCEA

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

How to get help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

Propose a feature or provide feedback on SharePoint: SharePoint User Voice portal