The Update BureauKB5002751: Cumulative update for SharePoint Server, version SE, July 2025. Remote code execution and spoofing flaws closed; search and RSS fixed
In short
Closes two Important SharePoint vulnerabilities and fixes search resilience during extended server shutdowns and RSS pages that fail after a .NET Framework 4.8 upgrade.
Does it affect you? Applies to: Computers running the release version of SharePoint Server Subscription Edition.
What changes
Fixes 2 changes
SharePoint search topology
-
SharePoint search is more resilient during extended server shutdowns, particularly when Crawler components remain active.1
Fixes an issue in which SharePoint search topology is not resilient during extended server shutdowns, particularly while
Crawlercomponents remain active.
RSS Feed pages
-
RSS Feed pages load correctly after an upgrade to .NET Framework 4.8.2
Fixes an issue in which RSS Feed pages cannot load correctly after an upgrade to .NET Framework 4.8.
New feature 1 change
Hybrid Search
-
The new Hybrid Search feature is enabled for the Standard release ring.3
Enables flight for the new Hybrid Search feature in the Standard release ring.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-07-08
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5002736, KB5002709, KB5002705, KB5002681
- Replaced by
- KB5002768
| Version | Build | Channel |
|---|---|---|
| SE | 16.0.18526.20424 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft SharePoint Remote Code Execution Vulnerability
|
Important | 8.8 |
|
Microsoft SharePoint Server Spoofing Vulnerability
|
Important | 6.5 |
Downloads (Microsoft Update Catalog)
Package
SE
1.5 GB
sts-x-none.cab
Language packs (49)
- Arabic (Saudi Arabia)
- Azerbaijani (Latin, Azerbaijan)
- Basque (Spain)
- Bosnian (Latin, Bosnia & Herzegovina)
- Bulgarian (Bulgaria)
- Catalan (Spain)
- Chinese (China)
- Chinese (Taiwan)
- Croatian (Croatia)
- Czech (Czechia)
- Danish (Denmark)
- Dutch (Netherlands)
- English (United States)
- Estonian (Estonia)
- Finnish (Finland)
- French (France)
- Galician (Spain)
- German (Germany)
- Greek (Greece)
- Hebrew (Israel)
- Hindi (India)
- Hungarian (Hungary)
- Indonesian (Indonesia)
- Irish (Ireland)
- Italian (Italy)
- Japanese (Japan)
- Kazakh (Kazakhstan)
- Korean (South Korea)
- Latvian (Latvia)
- Lithuanian (Lithuania)
- Macedonian (North Macedonia)
- Malay (Malaysia)
- Norwegian Bokmål (Norway)
- Polish (Poland)
- Portuguese (Brazil)
- Portuguese (Portugal)
- Romanian (Romania)
- Russian (Russia)
- Serbian (Cyrillic, Serbia)
- Serbian (Latin, Serbia)
- Slovak (Slovakia)
- Slovenian (Slovenia)
- Spanish (Spain)
- Swedish (Sweden)
- Thai (Thailand)
- Turkish (Türkiye)
- Ukrainian (Ukraine)
- Vietnamese (Vietnam)
- Welsh (United Kingdom)
Sources
Updated
Cited passages from Microsoft's official notes (3)
-
1.
Fixes an issue in which SharePoint search topology is not resilient during extended server shutdowns, particularly while
support.microsoft.comCrawlercomponents remain active. -
2.
Fixes an issue in which RSS Feed pages cannot load correctly after an upgrade to .NET Framework 4.8.
support.microsoft.com -
3.
Enables flight for the new Hybrid Search feature in the Standard release ring.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake