Skip to the content
The Update Bureau
SharePoint Server 2016 SharePoint Server 2016 Security update
Patch Tuesday Zero-day

KB5002861

KB5002861: Cumulative update for SharePoint Server, version 2016, April 2026. Exploited server spoofing flaw addressed; page rendering fixed

In short

Addresses an exploited server spoofing vulnerability and fixes an issue that kept some pages from rendering. It also delivers SharePoint Feature Pack 2, including the SharePoint Framework.

Does it affect you? Applies to: SharePoint Server 2016 installations with the release version installed. The update package is for x64 systems.

Build
16.0.5548.1003
Security
2 fixed · 1 exploited
Restart
Required

Microsoft ships this release as two packages: KB5002861, the update itself, and KB5002862 for the language packs. Install both on every server of the farm, then run the SharePoint Products Configuration Wizard.

What changes

New features 7 changes

SharePoint Framework (SPFx)

For: SharePoint Server 2016 administrators

  • Feature Pack 2 includes the SharePoint Framework.1

Administrative Actions Logging

For: SharePoint Server 2016 administrators

  • Feature Pack 1 includes Administrative Actions Logging.2

MinRole enhancements

For: SharePoint Server 2016 administrators

  • Feature Pack 1 includes MinRole enhancements.3

SharePoint Custom Tiles

For: SharePoint Server 2016 administrators

  • Feature Pack 1 includes SharePoint Custom Tiles.4

Hybrid Taxonomy

For: SharePoint Server 2016 administrators

  • Feature Pack 1 includes Hybrid Taxonomy.5

OneDrive API for SharePoint on-premises

For: SharePoint Server 2016 administrators

  • Feature Pack 1 includes the OneDrive API for SharePoint on-premises.6

OneDrive for Business modern user experience

For: Software Assurance customers

  • Feature Pack 1 includes the modern OneDrive for Business experience, which requires an active Software Assurance contract when enabled.7
    The contract must be active when the experience is enabled, either through this public update or by manual enablement.

Fixes 2 changes

SharePoint Server

For: SharePoint Server 2016 administrators

  • A server spoofing vulnerability is addressed.8
    This update resolves CVE-2026-32201.

SharePoint pages

  • Some SharePoint pages that did not render are addressed by this update.9

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2026-04-14
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5002850, KB5002841, KB5002828, KB5002821
+6 earlier KB5002805, KB5002788, KB5002778, KB5002771, KB5002760, KB5002744
Replaced by
KB5002868
VersionBuildChannel
2016 16.0.5548.1003 General availability

Security

2 vulnerabilities fixed
1 exploited 2 important
VulnerabilitySeverityCVSS
CVE-2026-32201 Exploited
Microsoft SharePoint Server Spoofing Vulnerability
 Important 6.5
CVE-2026-20945
Microsoft SharePoint Server Spoofing Vulnerability
 Important 4.6

Updated components

34,252 files changed since the previous update for the same versions.

Top changed componentsFiles
PowerPoint2858
Excel665
Word588
Office web apps373
Document conversion109
Access Services1

Sources

Updated
Cited passages from Microsoft's official notes (9)
  1. 1. This public update delivers Feature Pack 2 for SharePoint Server 2016. Feature Pack 2 contains the following feature: support.microsoft.com
  2. 2. Administrative Actions Logging support.microsoft.com
  3. 3. MinRole enhancements support.microsoft.com
  4. 4. SharePoint Custom Tiles support.microsoft.com
  5. 5. Hybrid Taxonomy support.microsoft.com
  6. 6. OneDrive API for SharePoint on-premises support.microsoft.com
  7. 7. The OneDrive for Business modern user experience requires an active Software Assurance contract at the time that the experience is enabled, either by installation of the public update or by manual enablement. support.microsoft.com
  8. 8. This security update resolves a Microsoft SharePoint server spoofing vulnerability. support.microsoft.com
  9. 9. Fixes an issue in which some SharePoint pages don't render. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 9 quoted passages · compared with Microsoft's page on Sep 26, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake