The Update BureauKB5002873: Cumulative update for SharePoint Server, version SE, June 2026. Closes exploited remote-code execution flaw; adds 26H1 features
In short
Closes an actively exploited SharePoint remote-code execution flaw (CVE-2026-58644), among 32 vulnerabilities, and introduces the 26H1 feature update alongside several fixes.
Does it affect you? Applies to: SharePoint Server Subscription Edition farms with the release version installed. The update package is for x64.
What changes
Fixes 4 changes
Document web part
- Multi-value managed metadata fields can be viewed and edited in the document web part.1
Web parts on communication sites
- Text data loss issues affecting web parts on communication sites are fixed.2
GB18030-2022
- The GB18030-2022 certification issue is fixed.3
User profiles in search results
- Incorrect characters no longer appear in the “About Me” section of user profiles in search results.4
Improvement 1 change
Property Pane
- When the Property Pane is open, selecting the editor lets users return focus to it.5
New feature 1 change
SharePoint Server Subscription Edition
For: SharePoint administrators and users
- The Version 26H1 feature update is included, and future public updates will include it too.6
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2026-06-09
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5002863, KB5002853, KB5002843, KB5002833
- Replaced by
- KB5002882
| Version | Build | Channel |
|---|---|---|
| SE | 16.0.19725.20384 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
CVE-2026-58644
Exploited
Microsoft SharePoint Remote Code Execution Vulnerability
|
Critical | 9.8 |
|
Microsoft Outlook and Word Remote Code Execution Vulnerability
|
Critical | 8.4 |
|
Microsoft Outlook and Word Remote Code Execution Vulnerability
|
Critical | 8.4 |
The table lists the 3 exploited, publicly disclosed or critical vulnerabilities. See all 32 vulnerabilities →
Downloads (Microsoft Update Catalog)
Package
SE
1.6 GB
sts-x-none.cab
Language packs (49)
- Arabic (Saudi Arabia)
- Azerbaijani (Latin, Azerbaijan)
- Basque (Spain)
- Bosnian (Latin, Bosnia & Herzegovina)
- Bulgarian (Bulgaria)
- Catalan (Spain)
- Chinese (China)
- Chinese (Taiwan)
- Croatian (Croatia)
- Czech (Czechia)
- Danish (Denmark)
- Dutch (Netherlands)
- English (United States)
- Estonian (Estonia)
- Finnish (Finland)
- French (France)
- Galician (Spain)
- German (Germany)
- Greek (Greece)
- Hebrew (Israel)
- Hindi (India)
- Hungarian (Hungary)
- Indonesian (Indonesia)
- Irish (Ireland)
- Italian (Italy)
- Japanese (Japan)
- Kazakh (Kazakhstan)
- Korean (South Korea)
- Latvian (Latvia)
- Lithuanian (Lithuania)
- Macedonian (North Macedonia)
- Malay (Malaysia)
- Norwegian Bokmål (Norway)
- Polish (Poland)
- Portuguese (Brazil)
- Portuguese (Portugal)
- Romanian (Romania)
- Russian (Russia)
- Serbian (Cyrillic, Serbia)
- Serbian (Latin, Serbia)
- Slovak (Slovakia)
- Slovenian (Slovenia)
- Spanish (Spain)
- Swedish (Sweden)
- Thai (Thailand)
- Turkish (Türkiye)
- Ukrainian (Ukraine)
- Vietnamese (Vietnam)
- Welsh (United Kingdom)
Sources
Updated
Cited passages from Microsoft's official notes (6)
-
1.
This update fixes the view and edit of multi-value managed metadata fields in the document web part.
support.microsoft.com -
2.
This update fixes text data loss issues that affect web parts on communication sites.
support.microsoft.com -
3.
This update fixes the GB18030-2022 certification issue.
support.microsoft.com -
4.
This update fixes an issue that causes incorrect characters to appear in the “About Me” section of user profiles in search results.
support.microsoft.com -
5.
This update improves focus handling while the Property Pane is open. This change allows users to seamlessly return focus to the editor by selecting it.
support.microsoft.com -
6.
This security update introduces the SharePoint Server Subscription Edition Version 26H1 feature update. This feature update will be included in all SharePoint Server Subscription Edition public updates going forward.
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Sep 26, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake