The Update BureauKB5002853: Cumulative update for SharePoint Server, version SE, April 2026. An exploited spoofing flaw and publishing-page fixes
In short
Closes an exploited spoofing vulnerability and fixes several issues, including publishing pages that show the wrong interface and a rich text editor that cannot insert line breaks.
Does it affect you? Applies to: Organizations running the release version of SharePoint Server Subscription Edition. The publishing-page issue applies to the on-premises edition.
What changes
Fixes 5 changes
SharePoint Server
- The GB18030-2022 certification issue is fixed.1
Publishing pages
Verified in package
For: SharePoint site users
-
Appending
p=2to a publishing page URL no longer makes the page show a File Picker-style interface instead of the expected page.2Fixes client-side routing that interpretsp=2as a page type for File Picker in SharePoint Server Subscription Edition (On-Premises).
SPOONSOnboard-CloudHybridSearch-SPOONS.ps1
-
The onboarding script no longer fails on new tenants.3
Validation uses the Azure Active Directory (Azure AD) App ID instead of the app name.
Rich text editor
For: SharePoint site users
- You can create a line return with Enter after inserting a hyperlink.4
Document library
For: SharePoint site users
- Default Office options appear when custom document content types are enabled.5
Improvement 1 change
Search
Verified in package
-
Search ingestion processes content faster through a higher cache hit rate.6
Increases the hit rate of the cache used during the ingestion process.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-04-14
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5002843, KB5002833, KB5002822, KB5002815
- Replaced by
- KB5002863
| Version | Build | Channel |
|---|---|---|
| SE | 16.0.19725.20210 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2026-32201
Exploited
Microsoft SharePoint Server Spoofing Vulnerability
|
Important | 6.5 |
|
Microsoft SharePoint Server Spoofing Vulnerability
|
Important | 4.6 |
Downloads (Microsoft Update Catalog)
Package
SE
1.6 GB
sts-x-none.cab
Language packs (49)
- Arabic (Saudi Arabia)
- Azerbaijani (Latin, Azerbaijan)
- Basque (Spain)
- Bosnian (Latin, Bosnia & Herzegovina)
- Bulgarian (Bulgaria)
- Catalan (Spain)
- Chinese (China)
- Chinese (Taiwan)
- Croatian (Croatia)
- Czech (Czechia)
- Danish (Denmark)
- Dutch (Netherlands)
- English (United States)
- Estonian (Estonia)
- Finnish (Finland)
- French (France)
- Galician (Spain)
- German (Germany)
- Greek (Greece)
- Hebrew (Israel)
- Hindi (India)
- Hungarian (Hungary)
- Indonesian (Indonesia)
- Irish (Ireland)
- Italian (Italy)
- Japanese (Japan)
- Kazakh (Kazakhstan)
- Korean (South Korea)
- Latvian (Latvia)
- Lithuanian (Lithuania)
- Macedonian (North Macedonia)
- Malay (Malaysia)
- Norwegian Bokmål (Norway)
- Polish (Poland)
- Portuguese (Brazil)
- Portuguese (Portugal)
- Romanian (Romania)
- Russian (Russia)
- Serbian (Cyrillic, Serbia)
- Serbian (Latin, Serbia)
- Slovak (Slovakia)
- Slovenian (Slovenia)
- Spanish (Spain)
- Swedish (Sweden)
- Thai (Thailand)
- Turkish (Türkiye)
- Ukrainian (Ukraine)
- Vietnamese (Vietnam)
- Welsh (United Kingdom)
Updated components
1,114 files changed since the previous update for the same versions.
| Top changed components | Files |
|---|---|
| Search | 202 |
| Document conversion | 100 |
| Client object model | 53 |
| Project Server | 33 |
| Document management and policies | 11 |
| Office web apps | 8 |
| Managed metadata | 6 |
| PowerPoint | 6 |
| PowerShell | 3 |
| Translation Services | 3 |
| Workflow | 3 |
| Publishing | 2 |
Verified in package: changed files confirm Publishing pages, Search.
Sources
Cited passages from Microsoft's official notes (6)
-
1.
This update fixes the GB18030-2022 certification issue.
support.microsoft.com -
2.
This update fixes an issue in SharePoint Server Subscription Edition (On‑Premises) in which appending the query parameter p to publishing page URLs causes unexpected UI behavior.
support.microsoft.com -
3.
This update fixes an issue in which the SPOONSOnboard-CloudHybridSearch-SPOONS.ps1 script fails on new tenants by updating validation to use the Azure Active Directory (Azure AD) App ID instead of the app name.
support.microsoft.com -
4.
This update fixes a rich text editor issue that prevents you from creating a line return by using the Enter key after you insert hyperlinks.
support.microsoft.com -
5.
This update fixes an issue in which the default Office options don't appear after you enable the custom document content types in a document library.
support.microsoft.com -
6.
This update improves ingestion throughput by increasing the hit rate of the cache that's used during the ingestion process.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Sep 26, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake