Skip to the content
The Update Bureau
SharePoint Server SE SharePoint Server SE Security update
Patch Tuesday

KB5002540

KB5002540: Cumulative update for SharePoint Server, version SE, January 2024. Remote code execution flaw closed; list and document access fixed

In short

Resolves an Important-severity remote code execution vulnerability and fixes several list, search, and document access problems.

Does it affect you? Applies to: Servers running the release version of SharePoint Server Subscription Edition. The update package is for x64 systems.

Build
16.0.16731.20462
Security
1 fixed
Restart
Required

What changes

Fixes 5 changes

SharePoint Server

  • A remote code execution vulnerability in SharePoint Server is resolved.1
    Addresses CVE-2024-21318.

Lists

For: Users of lists with Japanese characters in the site URL

  • Bulk deletion of multiple list items works in the modern interface when Japanese characters are included in the site URL.2

Search

For: Users of the modern experience

  • PDF files can be opened from the browser's search suggestions in the modern experience.3

Modern experience

For: Users of lists or document pages with Arabic letters in their URLs

  • Lists and document pages with Arabic letters in their URLs can be opened.4

Microsoft Project Server

For: Project Server users of the classic experience

  • In the classic document library experience, pressing Enter no longer automatically deletes an edited field value in a list.5

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-01-09
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaced by
KB5002564
VersionBuildChannel
SE 16.0.16731.20462 General availability

Security

1 vulnerability fixed
1 important
VulnerabilitySeverityCVSS
CVE-2024-21318
Microsoft SharePoint Server Remote Code Execution Vulnerability
 Important 8.8

Sources

Updated
Cited passages from Microsoft's official notes (5)
  1. 1. This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2024-21318. support.microsoft.com
  2. 2. Fixes an issue in which you cannot perform a bulk delete operation for multiple items in lists in the modern UI if Japanese characters are included in the site URL. support.microsoft.com
  3. 3. Fixes an issue in which you cannot open PDF files from the Search box suggestions list in the browser in the modern experience. support.microsoft.com
  4. 4. Fixes an issue in which you cannot open a list or a document page that contains Arabic letters in its URL in the modern experience. support.microsoft.com
  5. 5. Fixes an issue in which the edited field value in a list is automatically deleted after you press Enter while you're in the classic experience of the document library. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 5 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake