The Update BureauKB5002606: Cumulative update for SharePoint Server, version SE, July 2024. Critical server code flaw fixed; Google Docs paste works again
In short
Fixes a critical remote code execution vulnerability and restores several SharePoint features, including pasting Google Docs content into a text web part.
Does it affect you? Applies to: Computers running the release version of SharePoint Server Subscription Edition.
What changes
Fixes 4 changes
Text web part
For: SharePoint site users
- You can copy content from Google Docs and paste it into a text web part on a modern page.1
ListView Command Set extension
For: SharePoint developers
- The ListView Command Set extension works in debugging mode.2
Document library
For: SharePoint site users
- Bulk editing works in a flat view of a document library.3
Button web part
For: SharePoint site users
- The Button web part keeps its URL when you edit a page.4
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-07-09
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5002603, KB5002599, KB5002581, KB5002564, KB5002540
- Replaced by
- KB5002640
| Version | Build | Channel |
|---|---|---|
| SE | 16.0.17328.20424 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft SharePoint Server Remote Code Execution Vulnerability
|
Critical | 7.2 |
|
Microsoft SharePoint Server Information Disclosure Vulnerability
|
Important | 7.5 |
|
Microsoft SharePoint Server Remote Code Execution Vulnerability
|
Important | 7.2 |
|
Microsoft SharePoint Remote Code Execution Vulnerability
|
Important | 7.2 |
Downloads (Microsoft Update Catalog)
Package
SE
1.5 GB
sts-x-none.cab
Language packs (49)
- Arabic (Saudi Arabia)
- Azerbaijani (Latin, Azerbaijan)
- Basque (Spain)
- Bosnian (Latin, Bosnia & Herzegovina)
- Bulgarian (Bulgaria)
- Catalan (Spain)
- Chinese (China)
- Chinese (Taiwan)
- Croatian (Croatia)
- Czech (Czechia)
- Danish (Denmark)
- Dutch (Netherlands)
- English (United States)
- Estonian (Estonia)
- Finnish (Finland)
- French (France)
- Galician (Spain)
- German (Germany)
- Greek (Greece)
- Hebrew (Israel)
- Hindi (India)
- Hungarian (Hungary)
- Indonesian (Indonesia)
- Irish (Ireland)
- Italian (Italy)
- Japanese (Japan)
- Kazakh (Kazakhstan)
- Korean (South Korea)
- Latvian (Latvia)
- Lithuanian (Lithuania)
- Macedonian (North Macedonia)
- Malay (Malaysia)
- Norwegian Bokmål (Norway)
- Polish (Poland)
- Portuguese (Brazil)
- Portuguese (Portugal)
- Romanian (Romania)
- Russian (Russia)
- Serbian (Cyrillic, Serbia)
- Serbian (Latin, Serbia)
- Slovak (Slovakia)
- Slovenian (Slovenia)
- Spanish (Spain)
- Swedish (Sweden)
- Thai (Thailand)
- Turkish (Türkiye)
- Ukrainian (Ukraine)
- Vietnamese (Vietnam)
- Welsh (United Kingdom)
Sources
Updated
Cited passages from Microsoft's official notes (4)
-
1.
Fixes an issue in which you cannot copy the content from Google Docs and paste it into a text web part on a modern page.
support.microsoft.com -
2.
Fixes an issue in which the ListView Command Set extension doesn't work in debugging mode.
support.microsoft.com -
3.
Fixes an issue in which the bulk edit operation fails in a flat view of the document library.
support.microsoft.com -
4.
Fixes an issue in which the Button web part loses the URL between page edits.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake