Skip to the content
The Update Bureau
SharePoint Server 2019 SharePoint Server 2019 Security update
Patch Tuesday Zero-day

KB5002854

KB5002854: Cumulative update for SharePoint Server, version 2019, April 2026. Exploited spoofing flaw patched; pages render again

In short

Addresses an actively exploited spoofing flaw and fixes an issue that kept some pages from rendering. SharePoint Server 2019 updates end July 14, 2026.

Does it affect you? Applies to: SharePoint Server 2019 installations with the release version installed.

Build
16.0.10417.20114
Security
2 fixed · 1 exploited
Restart
Required

Microsoft ships this release as two packages: KB5002854, the update itself, and KB5002856 for the language packs. Install both on every server of the farm, then run the SharePoint Products Configuration Wizard.

What changes

Fixes 2 changes

SharePoint Server

  • Addresses an actively exploited flaw that could let an attacker spoof SharePoint Server.1
    Resolves the spoofing vulnerability CVE-2026-32201. The update package is build 16.0.10417.20114.

SharePoint pages

  • Some SharePoint pages render again instead of failing to display.2

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-04-14
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5002845, KB5002834, KB5002825, KB5002816
+6 earlier KB5002803, KB5002796, KB5002775, KB5002769, KB5002754, KB5002741
Replaced by
KB5002870
VersionBuildChannel
2019 16.0.10417.20114 General availability

Security

2 vulnerabilities fixed
1 exploited 2 important
VulnerabilitySeverityCVSS
CVE-2026-32201 Exploited
Microsoft SharePoint Server Spoofing Vulnerability
 Important 6.5
CVE-2026-20945
Microsoft SharePoint Server Spoofing Vulnerability
 Important 4.6

Updated components

436 files changed since the previous update for the same versions.

Top changed componentsFiles
Search44
Project Server23
Document conversion20
Client object model9
Access Services8
Document management and policies6
Managed metadata5
Office web apps3
PowerPoint3
PowerShell2
Publishing2
Translation Services2

Sources

Updated
Cited passages from Microsoft's official notes (2)
  1. 1. This security update resolves a Microsoft SharePoint Server spoofing vulnerability. support.microsoft.com
  2. 2. Fixes an issue in which some SharePoint pages don't render. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 2 quoted passages · compared with Microsoft's page on Sep 26, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake