The Update BureauKB5002603: Cumulative update for SharePoint Server, version SE, June 2024. Remote code execution flaw closed; farm and library issues fixed
In short
Closes one Important-severity remote code execution vulnerability and fixes several SharePoint Server and Project Server problems, including farm setup, document-library behavior and high CPU usage.
Does it affect you? Applies to: Computers running the release version of SharePoint Server Subscription Edition. The update also includes a fix for Project Server.
What changes
Fixes 9 changes
SharePoint Server farm
For: SharePoint farm administrators
-
A new server gets the right configuration when it joins an existing farm with the Antimalware Scanning Interface enabled.1
Fixes farm configuration when the Antimalware Scanning Interface (AMSI) feature is enabled.
Distributed cache
For: SharePoint farm administrators
-
Deleting a remote server no longer removes the distributed cache registry key.2
Applies when deleting a remote server by using a PowerShell cmdlet or Central Administration.
Calendar
- A list calendar opened from Quick Launch switches to the classic view as expected.3
Document library web parts
- In non-English environments, the New button respects custom content types.4
Document library
- A document library no longer enters an endless update loop when a bulk upload is interrupted midway.5
Discovery Download Manager
- The “Cannot Start Application” dialog no longer appears when you try to run Discovery Download Manager.6
Search
For: Anonymous site visitors
- Anonymous users can search in modern sites.7
Performance
For: SharePoint farm administrators
- The high CPU usage performance issue is fixed.8
Project Server
For: Project Server users
- Connected SharePoint sites no longer appear as not created when their URLs contain specific Unicode characters.9
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-06-11
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5002599, KB5002581, KB5002564, KB5002540
- Replaced by
- KB5002606
| Version | Build | Channel |
|---|---|---|
| SE | 16.0.17328.20362 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft SharePoint Server Remote Code Execution Vulnerability
|
Important | 7.8 |
Downloads (Microsoft Update Catalog)
Package
SE
1.5 GB
sts-x-none.cab
Language packs (49)
- Arabic (Saudi Arabia)
- Azerbaijani (Latin, Azerbaijan)
- Basque (Spain)
- Bosnian (Latin, Bosnia & Herzegovina)
- Bulgarian (Bulgaria)
- Catalan (Spain)
- Chinese (China)
- Chinese (Taiwan)
- Croatian (Croatia)
- Czech (Czechia)
- Danish (Denmark)
- Dutch (Netherlands)
- English (United States)
- Estonian (Estonia)
- Finnish (Finland)
- French (France)
- Galician (Spain)
- German (Germany)
- Greek (Greece)
- Hebrew (Israel)
- Hindi (India)
- Hungarian (Hungary)
- Indonesian (Indonesia)
- Irish (Ireland)
- Italian (Italy)
- Japanese (Japan)
- Kazakh (Kazakhstan)
- Korean (South Korea)
- Latvian (Latvia)
- Lithuanian (Lithuania)
- Macedonian (North Macedonia)
- Malay (Malaysia)
- Norwegian Bokmål (Norway)
- Polish (Poland)
- Portuguese (Brazil)
- Portuguese (Portugal)
- Romanian (Romania)
- Russian (Russia)
- Serbian (Cyrillic, Serbia)
- Serbian (Latin, Serbia)
- Slovak (Slovakia)
- Slovenian (Slovenia)
- Spanish (Spain)
- Swedish (Sweden)
- Thai (Thailand)
- Turkish (Türkiye)
- Ukrainian (Ukraine)
- Vietnamese (Vietnam)
- Welsh (United Kingdom)
Sources
Updated
Cited passages from Microsoft's official notes (9)
-
1.
Fixes an issue in which a new server doesn't have the right configuration when it joins an existing farm if the Antimalware Scanning Interface (AMSI) feature is enabled.
support.microsoft.com -
2.
Fixes an issue in which the distributed cache registry key is removed when you delete a remote server by using a PowerShell cmdlet or from Central Administration.
support.microsoft.com -
3.
Fixes an issue in which the calendar view doesn't switch to the classic view when you open the calendar view for a list from Quick Launch.
support.microsoft.com -
4.
Fixes an issue in which the New button of document library web parts doesn't respect custom content types in a non-English environment.
support.microsoft.com -
5.
Fixes an issue in which the document library enters an endless update loop if a bulk upload operation is interrupted midway.
support.microsoft.com -
6.
Fixes an issue in which you receive the “Cannot Start Application” dialog box when you try to run the Discovery Download Manager.
support.microsoft.com -
7.
Fixes an issue in which anonymous users cannot search in modern sites.
support.microsoft.com -
8.
Fixes the high CPU usage performance issue.
support.microsoft.com -
9.
Fixes an issue in which the connected SharePoint site displays as not created with specific Unicode characters in URL.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 9 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake