The latest patch Tuesday includes the following for SharePoint:
Executive Summary
This security update resolves a privately reported vulnerability. The vulnerability could allow elevation of privilege if an attacker bypasses authentication by browsing to an administrative URL on a SharePoint site. A successful attack leading to elevation of privilege could result in denial of service or information disclosure.
You should seriously consider this patch and apply it.