Skip to the content
The Update Bureau

SharePoint Server 2016

SharePoint Server 2016

Every published release for SharePoint Server 2016, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5002905 Aug 11, 2026
Build
16.0.5565.1001
Released
May 1, 2016
All editions
no longer updated since Jul 14, 2026
Known issues
7 open

Latest update

  • KB5002905 Released Aug 11, 2026
    Build 16.0.5565.1001

Build history

  • SharePoint Server 2016 SharePoint Server 2016 Security update
    Final update for this version Updated

    KB5002905

    Two critical privilege flaws; workflow and cache fixes

    Fixes two critical SharePoint Server elevation-of-privilege vulnerabilities and resolves problems with workflow links, Distributed Cache, and Office Online Server document editing.

    SharePoint Server 2016 reached the end of updates on July 14, 2026.

    Key changes 23 CVEs · 17 changes

    • New SharePoint Framework: SharePoint Framework is included with Feature Pack 2.
    • New Administrative Actions Logging: Administrative Actions Logging is included with Feature Pack 1.
    • New SharePoint Custom Tiles: SharePoint Custom Tiles are included with Feature Pack 1.

    Read update Source: Microsoft

    Build
    16.0.5565.1001
    Security
    23 fixed · 2 critical
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update
    Zero-day Updated

    KB5002891

    Exploited privilege flaw patched; final update for this version

    Attackers are exploiting a SharePoint Server privilege flaw. This is the final update for this version and includes fixes for critical security vulnerabilities.

    Check the newer update, KB5002905
    July 14, 2026, is the final update date for all editions of SharePoint Server 2016.
    Known issues: 3 open Organizations and IT administrators
    • Customers in multi-front-end SharePoint farms with Trusted Provider or Forms authentication may face repeated authentication prompts or multiple sign-ins.
    • When a workflow status link is selected, WrkStat.aspx displays the following error message: The WorkflowInstanceID parameter is invalid.
    • Customers who install the SharePoint 2016 July Public Update might find that Office Online Server can't render or edit documents.

    Key changes 40 CVEs · 8 changes

    • New SharePoint Framework (SPFx): SharePoint Framework is included in Feature Pack 2.
    • New Administrative Actions Logging: Feature Pack 1 includes Administrative Actions Logging.
    • New SharePoint Custom Tiles: Feature Pack 1 includes SharePoint Custom Tiles.

    Read update Source: Microsoft

    Build
    16.0.5561.1001
    Security
    40 fixed · 6 critical · 1 exploited
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update
    Zero-day

    KB5002880

    Actively exploited remote-code flaw patched before support ends

    The update patches an actively exploited remote-code execution flaw and other vulnerabilities. SharePoint Server 2016 updates end on July 14, 2026.

    Check the newer update, KB5002891
    Updates for SharePoint Server 2016 end on July 14, 2026, for all editions.

    Key changes 30 CVEs · 9 changes

    • New SharePoint Framework: Feature Pack 2 delivers SharePoint Framework.
    • New Administrative Actions Logging: Feature Pack 1 includes Administrative Actions Logging.
    • New MinRole: Feature Pack 1 includes MinRole enhancements.

    Read update Source: Microsoft

    Build
    16.0.5556.1005
    Security
    30 fixed · 3 critical · 1 exploited
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002868

    Critical server code-execution flaw; some pages fail to render

    The update addresses 9 vulnerabilities, including critical remote-code execution flaws in SharePoint Server and Word. It also fixes rendering on some SharePoint pages.

    Updates for SharePoint Server 2016 end on July 14, 2026.

    Key changes 9 CVEs · 3 changes

    • New SharePoint Framework (SPFx): Feature Pack 2, which includes SharePoint Framework (SPFx), is delivered with this update.
    • New Feature Pack 1: The update also delivers Administrative Actions Logging, MinRole enhancements, SharePoint Custom Tiles, Hybrid Taxonomy, the OneDrive A...
    • Fix SharePoint pages: Some SharePoint pages render again.

    Read update Source: Microsoft

    Build
    16.0.5552.1002
    Security
    9 fixed · 2 critical
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update
    Zero-day

    KB5002861

    Exploited server spoofing flaw addressed; page rendering fixed

    Addresses an exploited server spoofing vulnerability and fixes an issue that kept some pages from rendering. It also delivers SharePoint Feature Pack 2, including the SharePoint Framework.

    Check the newer update, KB5002868
    Updates for SharePoint Server 2016 end on July 14, 2026, for all editions.

    Key changes 2 CVEs · 9 changes

    • New SharePoint Framework (SPFx): Feature Pack 2 includes the SharePoint Framework.
    • New Administrative Actions Logging: Feature Pack 1 includes Administrative Actions Logging.
    • New MinRole enhancements: Feature Pack 1 includes MinRole enhancements.

    Read update Source: Microsoft

    Build
    16.0.5548.1003
    Security
    2 vulnerabilities fixed · 1 actively exploited
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002850

    Critical Office remote-code flaw patched; pages render again

    The update closes four vulnerabilities, including a critical Office remote-code flaw, and fixes an issue that kept some pages from rendering. It also delivers SharePoint Framework (SPFx).

    Check the newer update, KB5002861
    Updates for SharePoint Server 2016 end on July 14, 2026.

    Key changes 4 CVEs · 4 changes

    • New SharePoint Framework (SPFx): Feature Pack 2 adds SharePoint Framework (SPFx).
    • New Feature Pack 1: The update also delivers Feature Pack 1 features, including new administration, hybrid, and OneDrive capabilities.
    • Fix Security: Remote code execution vulnerabilities in SharePoint Server and Office, and a SharePoint Server spoofing vulnerability, are resolved.

    Read update Source: Microsoft

    Build
    16.0.5543.1000
    Security
    4 fixed · 1 critical
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002841

    Word and Outlook spoofing flaws fixed; machine-key setting restored

    The update fixes two Important spoofing vulnerabilities affecting Word and Outlook, and restores the ability to set SharePoint machine keys after the September 2025 cumulative update.

    Check the newer update, KB5002850
    Updates for SharePoint Server 2016 end on July 14, 2026.

    Key changes 2 CVEs · 10 changes

    • New SharePoint Framework (SPFx): SharePoint Framework is included as part of Feature Pack 2.
    • New Administrative Actions Logging: Administrative Actions Logging is included among the features delivered from Feature Pack 1.
    • New MinRole enhancements: MinRole enhancements are included among the features delivered from Feature Pack 1.

    Read update Source: Microsoft

    Build
    16.0.5539.1002
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002828

    Seven security flaws addressed; Remote Blob Storage duplication fixed

    The update addresses seven security vulnerabilities and fixes data duplication during Remote Blob Storage migration. SharePoint Server 2016 updates end on July 14, 2026.

    Check the newer update, KB5002841
    SharePoint Server 2016 updates end on July 14, 2026.

    Key changes 7 CVEs · 4 changes

    • New SharePoint Framework: The update delivers Feature Pack 2, which includes SharePoint Framework.
    • New Feature Pack 1: The update also includes Feature Pack 1 features: Administrative Actions Logging, MinRole enhancements, SharePoint Custom Tiles, Hybrid...
    • Fix Security: The update addresses seven security vulnerabilities affecting Office Click-to-Run, SharePoint, and Word.

    Read update Source: Microsoft

    Build
    16.0.5535.1001
    Security
    7 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002821

    Outlook and Word code-execution flaws addressed; HTTP scanning enabled

    The update addresses remote code execution vulnerabilities affecting Outlook and Word, and enables scanning of HTTP request bodies in SharePoint 2016. SharePoint Server 2016 updates end July 14, 2026.

    Check the newer update, KB5002828
    Updates for all editions of SharePoint Server 2016 end July 14, 2026.

    Key changes 4 CVEs · 9 changes

    • New SharePoint Framework (SPFx): SharePoint Server 2016 receives the SharePoint Framework.
    • New Administrative Actions Logging: SharePoint Server 2016 receives Administrative Actions Logging.
    • New MinRole enhancements: SharePoint Server 2016 receives MinRole enhancements.

    Read update Source: Microsoft

    Build
    16.0.5530.1000
    Security
    4 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002805

    Remote code execution flaw fixed; farm-host access issue remains

    The update addresses a SharePoint remote code execution vulnerability and removes permissions that caused failures during later update installations. An open issue can log event tags when users access a settings page through an additional farm host.

    Check the newer update, KB5002821
    Updates for all SharePoint Server 2016 editions end July 14, 2026.
    Known issues: 1 open Organizations and IT administrators
    • Users may see “4gab5" event tags logged in the SharePoint Unified Logging System (ULS) logs when they access sitedirectorysettings.aspx by using ‘set other host’.

    Key changes 1 CVE · 9 changes

    • New SharePoint Framework (SPFx): SharePoint Server 2016 includes SharePoint Framework (SPFx).
    • New Administrative Actions Logging: The update includes Administrative Actions Logging.
    • New MinRole enhancements: The update includes MinRole enhancements.

    Read update Source: Microsoft

    Build
    16.0.5526.1001
    Security
    1 vulnerability fixed
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002788

    Fixes 6 vulnerabilities

    Addresses six Important vulnerabilities. SharePoint Server 2016 updates are scheduled to end on July 14, 2026.

    Check the newer update, KB5002805
    Updates for SharePoint Server 2016 are scheduled to end on July 14, 2026.

    Key security notes 6 CVEs

    • CVSS 8.8 CVE-2025-59228: Microsoft SharePoint Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2025-59237: Microsoft SharePoint Remote Code Execution Vulnerability
    • CVSS 7.8 CVE-2025-59222: Microsoft Word Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.5522.1000
    Security
    6 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002778

    Fixes 3 vulnerabilities

    Addresses three Important vulnerabilities. Updates for SharePoint Server 2016 end on July 14, 2026.

    Check the newer update, KB5002788
    Updates for SharePoint Server 2016 end on July 14, 2026.

    Key security notes 3 CVEs

    • CVSS 8.8 CVE-2025-54897: Microsoft SharePoint Remote Code Execution Vulnerability
    • CVSS 7.8 CVE-2025-54906: Microsoft Office Remote Code Execution Vulnerability
    • CVSS 7.1 CVE-2025-54905: Microsoft Word Information Disclosure Vulnerability

    Read update Source: Microsoft

    Build
    16.0.5517.1000
    Security
    3 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002771

    Critical Word flaw patched; BCS support needs manual enabling

    A critical Word flaw that could allow remote code execution is patched. BCS support for two system types still needs manual enabling, and calendar overlay settings might have an issue.

    Check the newer update, KB5002778
    SharePoint Server 2016 updates end on July 14, 2026.
    Known issues: 1 open Organizations and IT administrators
    • After you install this update, you might experience an issue when you configure calendar overlay settings.

    Key changes 4 CVEs · 9 changes

    • New SharePoint Framework (SPFx): SharePoint Framework is included.
    • New Administrative Actions Logging: Administrative Actions Logging is included.
    • New MinRole enhancements: MinRole enhancements are included.

    Read update Source: Microsoft

    Build
    16.0.5513.1002
    Security
    4 fixed · 1 critical
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Out-of-band security update
    Out-of-band Zero-day

    KB5002760

    Critical remote-code flaw under attack; page resources may fail

    A critical remote-code flaw under active attack is fixed. Some SharePoint page resources might still fail to load, and the update includes a workaround.

    Check the newer update, KB5002771
    SharePoint Server 2016 updates end on July 14, 2026.
    Known issues: 2 open Organizations and IT administrators
    • $farm.ContainsGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")
    • $farm.RemoveGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")

    Key changes 2 CVEs · 8 changes

    • New SharePoint Framework (SPFx): SharePoint Server 2016 gains the SharePoint Framework.
    • New Administrative Actions Logging: SharePoint Server 2016 gains Administrative Actions Logging.
    • New MinRole enhancements: SharePoint Server 2016 gains MinRole enhancements.

    Read update Source: Microsoft

    Build
    16.0.5513.1001
    Security
    2 fixed · 1 critical · 1 exploited
    Restart
    Required
  • SharePoint Server 2016 SharePoint Server 2016 Security update

    KB5002744

    Critical remote-code execution flaws in Word and server code

    Addresses four vulnerabilities, including two critical remote-code execution flaws affecting Word and the server. The update can request a restart.

    Check the newer update, KB5002760

    Key security notes 4 CVEs

    • Critical CVE-2025-49704: Microsoft SharePoint Remote Code Execution Vulnerability
    • Critical CVE-2025-49703: Microsoft Word Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2025-49701: Microsoft SharePoint Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.5508.1000
    Security
    4 fixed · 2 critical
    Restart
    Required