Description of the security update for SharePoint Foundation 2013: September 12, 2017

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2017-8745.

Note To apply this security update, you must have the release version of Service Pack 1 for Microsoft SharePoint Foundation 2013 installed on the computer.

• Improve screen reader accessibility behavior for Person/Group fields on the NewForm.aspx and EditForm.aspx pages.
• FBA groups are incorrectly created with leading or trailing spaces if those spaces were present in the input in the people picker.
• When you use a property restriction that has an equals sign (=) for an in-place search, all results are returned unexpectedly. In addition, when you use a keyword that includes a number sign (#), the word that follows the number sign is ignored as the input keyword.
• When you open a calendar in Quick Edit mode and try to edit the end time of an event, you receive the following error message:

  Invalid data has been used to update the list item.