The Update BureauKB5002676: Cumulative update for SharePoint Server, version SE, January 2025. Remote code execution and spoofing flaws addressed; search failures fixed
In short
The update addresses SharePoint Server remote code execution and spoofing vulnerabilities, and fixes several search, import, and web part problems.
Does it affect you? Applies to: Computers running the release version of SharePoint Server Subscription Edition. The update package is for 64-bit systems.
What changes
Fixes 6 changes
Cross-site collection moves
-
Users no longer see the unsupported search box for cross-site collection moves.1
Fixes an incorrect translation that caused the search box to appear.
Client-Side Object Model (CSOM)
For: SharePoint developers
-
Exporting a document set no longer fails with an EventTrace initializer error.2
Fixes the
ExportDocumentSetmethod failure and itsMS.Utility.EventTraceinitializer exception.
Import-SPWeb
-
You can import a site that was originally created in SharePoint 2007.3
Fixes the
Import-SPWebcommand failure when importing sites originally created in Microsoft SharePoint 2007.
Search results page
-
Search scope breadcrumb navigation works again on search results pages.4
Fixes the search scope navigation (breadcrumb navigation) failure.
Quick Chart web part
- Quick Chart updates when the data in its source list changes.5
NodeRunner.exe
- NodeRunner.exe no longer stops responding during a search operation.6
Improvement 1 change
Search Content Service (SCS)
-
Hybrid search requests include a User-Agent header.7
Adds a
User-Agentheader to requests to the Search Content Service (SCS) for hybrid search.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-01-14
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5002658, KB5002651, KB5002649, KB5002640
- Replaced by
- KB5002681
| Version | Build | Channel |
|---|---|---|
| SE | 16.0.17928.20356 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft SharePoint Server Remote Code Execution Vulnerability
|
Important | 7.8 |
|
Microsoft SharePoint Server Remote Code Execution Vulnerability
|
Important | 7.2 |
|
Microsoft SharePoint Server Spoofing Vulnerability
|
Important | 6.3 |
Downloads (Microsoft Update Catalog)
Package
SE
1.5 GB
sts-x-none.cab
Language packs (49)
- Arabic (Saudi Arabia)
- Azerbaijani (Latin, Azerbaijan)
- Basque (Spain)
- Bosnian (Latin, Bosnia & Herzegovina)
- Bulgarian (Bulgaria)
- Catalan (Spain)
- Chinese (China)
- Chinese (Taiwan)
- Croatian (Croatia)
- Czech (Czechia)
- Danish (Denmark)
- Dutch (Netherlands)
- English (United States)
- Estonian (Estonia)
- Finnish (Finland)
- French (France)
- Galician (Spain)
- German (Germany)
- Greek (Greece)
- Hebrew (Israel)
- Hindi (India)
- Hungarian (Hungary)
- Indonesian (Indonesia)
- Irish (Ireland)
- Italian (Italy)
- Japanese (Japan)
- Kazakh (Kazakhstan)
- Korean (South Korea)
- Latvian (Latvia)
- Lithuanian (Lithuania)
- Macedonian (North Macedonia)
- Malay (Malaysia)
- Norwegian Bokmål (Norway)
- Polish (Poland)
- Portuguese (Brazil)
- Portuguese (Portugal)
- Romanian (Romania)
- Russian (Russia)
- Serbian (Cyrillic, Serbia)
- Serbian (Latin, Serbia)
- Slovak (Slovakia)
- Slovenian (Slovenia)
- Spanish (Spain)
- Swedish (Sweden)
- Thai (Thailand)
- Turkish (Türkiye)
- Ukrainian (Ukraine)
- Vietnamese (Vietnam)
- Welsh (United Kingdom)
Sources
Cited passages from Microsoft's official notes (7)
-
1.
Fixes an issue in which users could see the search box for cross-site collection moves. This situation is unsupported because of an incorrect translation.
support.microsoft.com -
2.
Fixes an issue in which the
support.microsoft.comExportDocumentSetmethod in the Client-Side Object Model (CSOM) fails and returns the following error message: -
3.
Fixes an issue in which the
support.microsoft.comImport-SPWebcommand fails when you import a site that was originally created in Microsoft SharePoint 2007. -
4.
Fixes an issue in which the search scope navigation (breadcrumb navigation) on the search results page stops working.
support.microsoft.com -
5.
Fixes an issue in which the Quick Chart web part doesn't update when the data of a source list is changed.
support.microsoft.com -
6.
Fixes an issue in which the NodeRunner.exe process stops responding during a search operation.
support.microsoft.com -
7.
Adds a User-Agent header in the request to the Search Content Service (SCS) for hybrid search.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 7 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake