Skip to the content
The Update Bureau
SharePoint Server SE SharePoint Server SE Security update
Patch Tuesday

KB5002649

KB5002649: Cumulative update for SharePoint Server, version SE, October 2024. Elevation-of-privilege flaw fixed; Document Set updates run faster

In short

Resolves an elevation-of-privilege vulnerability and improves Document Set template updates, while also addressing three SharePoint Server Subscription Edition issues.

Does it affect you? Applies to: Devices running the release version of SharePoint Server Subscription Edition.

Build
16.0.17928.20162
Security
1 fixed
Restart
Required

What changes

Fixes 3 changes

JavaScript mutation events

For: SharePoint Server Subscription Edition users

  • The impact of the 2024 JavaScript mutation-events deprecation on product functionality is mitigated.1
    This fix applies to SharePoint Server Subscription Edition, not SharePoint Server 2019 or SharePoint Server 2016, because the issue doesn't block functionality in those editions.

Saving documents to a SharePoint library

For: SharePoint Server Subscription Edition users

  • An incorrect script error message no longer appears when you save a document to a SharePoint library using Microsoft 365.2

ParserServer.exe

For: SharePoint Server Subscription Edition users

  • ParserServer.exe no longer stops responding in some cases.3

Improvement 1 change

Document Set template update job

For: SharePoint Server Subscription Edition users

  • The Document Set template update job runs more efficiently.4
    Improves the performance of the Document Set template update job.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-10-08
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5002640, KB5002606, KB5002603, KB5002599
+3 earlier KB5002581, KB5002564, KB5002540
Replaced by
KB5002651
VersionBuildChannel
SE 16.0.17928.20162 General availability

Security

1 vulnerability fixed
1 important
VulnerabilitySeverityCVSS
CVE-2024-43503
Microsoft SharePoint Elevation of Privilege Vulnerability
 Important 7.8

Sources

Updated
Cited passages from Microsoft's official notes (4)
  1. 1. Mitigates the effect of the JavaScript mutation events deprecation in 2024 that blocks product functionality in SharePoint Server Subscription Edition. support.microsoft.com
  2. 2. Fixes an issue in which a script error message incorrectly appears when you save a document to a SharePoint library by using Microsoft 365. support.microsoft.com
  3. 3. Fixes an issue in which the ParserServer.exe process stops responding in some cases. support.microsoft.com
  4. 4. Improves the performance of the Document Set template update job. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 4 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake