The Update BureauKB5002815: Cumulative update for SharePoint Server, version SE, December 2025. Spoofing flaw closed; 25H2 features and workflow fixes added
In short
The update closes a SharePoint Server spoofing vulnerability and introduces the 25H2 feature update, alongside accessibility, crawling, workflow, search and rendering fixes.
Does it affect you? Applies to: Servers running the release version of SharePoint Server Subscription Edition.
What changes
Fixes 10 changes
SharePoint Server
-
A spoofing vulnerability in SharePoint Server is fixed.1
Resolves CVE-2025-64672.
Command bar
For: People navigating with a keyboard
-
When you use the Tab key to navigate, focus moves correctly to the New button instead of moving there twice.2
Fixes the focus behavior on the command bar during Tab-key navigation.
Image Upload options panel
-
Text in the Image Upload options panel has improved color contrast.3
Fixes an accessibility issue affecting the text color contrast ratio.
Send button
For: People navigating with a keyboard
-
Focus follows the correct order after you activate the Send button.4
Fixes an accessibility issue in the focus order after activating Send.
Remove icon
For: People navigating with a keyboard
-
The Remove icon is accessible when you navigate with the Tab key.5
Fixes keyboard accessibility for the Remove icon.
Search
Verified in package
For: SharePoint search administrators
-
Website crawling works correctly when the start page links to content in higher-level directories.6
Fixes website crawling when the start page contains links to content in higher-level directories.
Workflow
Verified in package
For: SharePoint workflow administrators
-
ServiceHost errors that suspend workflows and make them unresponsive are fixed.7
Fixes ServiceHost errors that cause workflow suspension and unresponsiveness.
Hybrid search
Verified in package
For: SharePoint search administrators
-
Certain reliability issues in hybrid search data ingestion are fixed.8
Fixes certain reliability issues in data ingestion for hybrid search.
People Picker
-
A performance regression in People Picker is addressed by rolling back recent changes.9
The update rolls back recent changes to resolve a performance regression.
Rendering
For: Users viewing content with GB18030 characters
- Rendering issues affecting the GB18030 character set are fixed.10
Improvement 1 change
Audit logs
For: Users starting the audit-log process
- Users must specify the library for storing audit logs before starting the process.11
New feature 1 change
SharePoint Server Subscription Edition
- The Version 25H2 feature update is introduced and will be included in future public updates.12
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2025-12-09
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5002800, KB5002786, KB5002784, KB5002773
- Replaced by
- KB5002822
| Version | Build | Channel |
|---|---|---|
| SE | 16.0.19127.20378 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft SharePoint Server Spoofing Vulnerability
|
Important | 8.8 |
Downloads (Microsoft Update Catalog)
Package
SE
1.6 GB
sts-x-none.cab
Language packs (49)
- Arabic (Saudi Arabia)
- Azerbaijani (Latin, Azerbaijan)
- Basque (Spain)
- Bosnian (Latin, Bosnia & Herzegovina)
- Bulgarian (Bulgaria)
- Catalan (Spain)
- Chinese (China)
- Chinese (Taiwan)
- Croatian (Croatia)
- Czech (Czechia)
- Danish (Denmark)
- Dutch (Netherlands)
- English (United States)
- Estonian (Estonia)
- Finnish (Finland)
- French (France)
- Galician (Spain)
- German (Germany)
- Greek (Greece)
- Hebrew (Israel)
- Hindi (India)
- Hungarian (Hungary)
- Indonesian (Indonesia)
- Irish (Ireland)
- Italian (Italy)
- Japanese (Japan)
- Kazakh (Kazakhstan)
- Korean (South Korea)
- Latvian (Latvia)
- Lithuanian (Lithuania)
- Macedonian (North Macedonia)
- Malay (Malaysia)
- Norwegian Bokmål (Norway)
- Polish (Poland)
- Portuguese (Brazil)
- Portuguese (Portugal)
- Romanian (Romania)
- Russian (Russia)
- Serbian (Cyrillic, Serbia)
- Serbian (Latin, Serbia)
- Slovak (Slovakia)
- Slovenian (Slovenia)
- Spanish (Spain)
- Swedish (Sweden)
- Thai (Thailand)
- Turkish (Türkiye)
- Ukrainian (Ukraine)
- Vietnamese (Vietnam)
- Welsh (United Kingdom)
Updated components
1,119 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Search | 202 |
| Document conversion | 101 |
| Client object model | 53 |
| Project Server | 33 |
| Office web apps | 8 |
| Document management and policies | 6 |
| PowerPoint | 6 |
| Managed metadata | 4 |
| PowerShell | 4 |
| Translation Services | 3 |
| Workflow | 3 |
| Publishing | 2 |
Verified in package: changed files confirm Search, Workflow, Hybrid search.
Sources
Cited passages from Microsoft's official notes (12)
-
1.
This security update resolves a Microsoft SharePoint Server Spoofing vulnerability.
support.microsoft.com -
2.
This update fixes an accessibility issue in which the focus moves two times to the New button on the command bar when the user navigates by using the Tab key. The focus now moves correctly.
support.microsoft.com -
3.
This update fixes an accessibility issue that affects the color contrast ratio of text in the Image Upload options panel.
support.microsoft.com -
4.
This change fixes an accessibility issue in which the focus order is incorrect after you activate the Send button.
support.microsoft.com -
5.
This change fixes an accessibility issue in which the Remove icon isn't accessible when you use the Tab key.
support.microsoft.com -
6.
This update fixes an issue in which website crawling doesn't work correctly if the start page contains links to content that's located in higher-level directories.
support.microsoft.com -
7.
This update fixes ServiceHost errors that cause workflow suspension and unresponsiveness.
support.microsoft.com -
8.
This update fixes certain reliability issues in data ingestion for hybrid search.
support.microsoft.com -
9.
This update resolves a performance regression in the People Picker by rolling back recent changes.
support.microsoft.com -
10.
This update fixes rendering issues that affect the GB18030 character set.
support.microsoft.com -
11.
This update requires users to specify the library to use for storing the audit logs before they start the process.
support.microsoft.com -
12.
This security update introduces the SharePoint Server Subscription Edition Version 25H2 feature update. This feature update will be included in all SharePoint Server Subscription Edition public updates going forward.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 12 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake