Skip to the content
The Update Bureau

SharePoint Server 2019

SharePoint Server 2019

Every published release for SharePoint Server 2019, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5002894 Aug 11, 2026
Build
16.0.10417.20198
Released
Oct 22, 2018
All editions
no longer updated since Jul 14, 2026
Known issues
6 open

Latest update

  • KB5002894 Released Aug 11, 2026
    Build 16.0.10417.20198

Build history

  • SharePoint Server 2019 SharePoint Server 2019 Security update
    Final update for this version Updated

    KB5002894

    Remote-code execution and privilege-escalation risks addressed

    The update addresses 27 vulnerabilities, including three critical SharePoint Server flaws involving remote-code execution and privilege escalation. It also fixes broken workflow status links and changes several SharePoint features.

    Microsoft's lifecycle data lists July 14, 2026 as the end date for updates across all editions. This is an end-of-updates date, not a stated end-of-support date.

    Key changes 27 CVEs · 8 changes

    • Improved SharePoint 2013 workflows: An advisory is provided for SharePoint 2013 workflows.
    • Improved Remote Event Receivers: Orphaned Remote Event Receivers without an app identifier might be blocked in the future.
    • Improved ToolPane: The ToolPane feature might be disabled in the future.

    Read update Source: Microsoft

    Build
    16.0.10417.20198
    Security
    27 fixed · 3 critical
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update
    Zero-day Updated

    KB5002883

    Exploited privilege flaw patched; workflow and page fixes

    An actively exploited privilege flaw is patched, alongside fixes for page loading and SharePoint 2010 workflows. Support for version 2019 ends on July 14, 2026.

    Check the newer update, KB5002894
    Updates for all SharePoint Server 2019 editions ended on July 14, 2026.
    Known issues: 2 open Organizations and IT administrators
    • Customers in multi-front-end SharePoint farms with Trusted Provider or Forms authentication may face repeated authentication prompts or multiple sign-ins.
    • When a workflow status link is selected, WrkStat.aspx displays the following error message: The WorkflowInstanceID parameter is invalid.

    Key changes 40 CVEs · 2 changes

    • Fix SharePoint pages: Pages can load when certain user controls were flagged as unsafe for security.
    • Fix SharePoint 2010 workflows: SharePoint 2010 workflows can start after the June 2026 update is installed.
    • Exploited CVE-2026-56164: Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20175
    Security
    40 fixed · 6 critical · 1 exploited
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update
    Zero-day

    KB5002874

    Actively exploited remote-code flaw patched; 2019 updates end July 14

    Fixes security vulnerabilities in SharePoint Server 2019, including an actively exploited remote-code flaw. Updates for this version end July 14, 2026.

    Check the newer update, KB5002883
    Updates for SharePoint Server 2019 end July 14, 2026, across all editions.

    Key changes 32 CVEs · 1 change

    • Fix Security: The update resolves vulnerabilities that could allow remote code execution, spoofing, elevation of privilege, or information disclosure...
    • Exploited CVE-2026-58644: Microsoft SharePoint Remote Code Execution Vulnerability
    • Critical CVE-2026-45456: Microsoft Outlook and Word Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20153
    Security
    32 fixed · 3 critical · 1 exploited
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002870

    Two critical code-execution flaws resolved; accessibility improved

    The update resolves 9 vulnerabilities, including two critical remote-code-execution flaws, and fixes accessibility and page-loading problems. Updates for this server version end July 14, 2026.

    Check the newer update, KB5002874
    Updates for all editions of SharePoint Server 2019 end July 14, 2026.

    Key changes 9 CVEs · 5 changes

    • Fix Microsoft Word: A remote-code-execution vulnerability in Microsoft Word is resolved.
    • Fix SharePoint Server: A remote-code-execution vulnerability in SharePoint Server is resolved.
    • Fix Accessibility: Decorative images are marked so screen readers ignore them instead of announcing them as graphics.

    Read update Source: Microsoft

    Build
    16.0.10417.20128
    Security
    9 fixed · 2 critical
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update
    Zero-day

    KB5002854

    Exploited spoofing flaw patched; pages render again

    Addresses an actively exploited spoofing flaw and fixes an issue that kept some pages from rendering. SharePoint Server 2019 updates end July 14, 2026.

    Check the newer update, KB5002870
    Updates for all SharePoint Server 2019 editions end July 14, 2026.

    Key changes 2 CVEs · 2 changes

    • Fix SharePoint Server: Addresses an actively exploited flaw that could let an attacker spoof SharePoint Server.
    • Fix SharePoint pages: Some SharePoint pages render again instead of failing to display.
    • Exploited CVE-2026-32201: Microsoft SharePoint Server Spoofing Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20114
    Security
    2 vulnerabilities fixed · 1 actively exploited
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002845

    Critical Office code flaw addressed; pages render again

    The update addresses four vulnerabilities, including a critical Microsoft Office remote code execution flaw, and fixes an issue where some SharePoint pages do not render.

    Check the newer update, KB5002854
    Support for all SharePoint Server 2019 editions ends July 14, 2026.

    Key changes 4 CVEs · 1 change

    • Fix SharePoint pages: Some SharePoint pages that did not render now render.
    • Critical CVE-2026-26113: Microsoft Office Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2026-26106: Microsoft SharePoint Server Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20102
    Security
    4 fixed · 1 critical
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002834

    Word and Outlook spoofing flaws fixed; web-process stalls addressed

    The update fixes two Important Word and Outlook spoofing flaws—tricks that make content appear to come from a trusted source—and addresses repeated SharePoint web-process stalls.

    Check the newer update, KB5002845
    SharePoint Server 2019 updates end on July 14, 2026.

    Key changes 2 CVEs · 3 changes

    • Fix GB18030-2022 China certification: The GB18030-2022 China certification issue is fixed.
    • Fix SharePoint Server: SharePoint's process for handling web requests no longer repeatedly stops responding.
    • Fix Set-SPMachineKey: Administrators can use Set-SPMachineKey to set machine keys again after installing the September 2025 cumulative update.

    Read update Source: Microsoft

    Build
    16.0.10417.20097
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002825

    Remote code execution flaws resolved; RBS migration duplication fixed

    The update resolves seven Important vulnerabilities and fixes a China certification issue and duplicate data during Remote Blob Storage migration.

    Check the newer update, KB5002834
    SharePoint Server 2019 reaches the end of updates for all editions on July 14, 2026.

    Key changes 7 CVEs · 3 changes

    • Fix SharePoint Server security: The update resolves vulnerabilities involving elevation of privilege, remote code execution, information disclosure, and spoofing.
    • Fix GB18030-2022 certification: The GB18030-2022 China certification issue is fixed.
    • Fix Remote Blob Storage migration: Data duplication during Remote Blob Storage migration is fixed.

    Read update Source: Microsoft

    Build
    16.0.10417.20083
    Security
    7 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002816

    Outlook and Word code-execution flaws addressed; certification issue fixed

    The update addresses four Important vulnerabilities affecting Outlook and Word, and fixes a GB18030-2022 China certification issue in SharePoint Server 2019.

    Check the newer update, KB5002825
    Updates for SharePoint Server 2019 are scheduled to end on July 14, 2026.

    Key changes 4 CVEs · 2 changes

    • Fix Microsoft Outlook and Word: The update resolves remote code execution vulnerabilities affecting Microsoft Outlook and Microsoft Word.
    • Fix SharePoint Server: The GB18030-2022 China certification issue is fixed.
    • CVSS 7.8 CVE-2025-62558: Microsoft Word Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20075
    Security
    4 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002803

    Remote code execution flaw closed; China certificate issue fixed

    Closes an Important SharePoint remote code execution vulnerability, CVE-2025-62204, and fixes a China certificate issue. A known issue can log event tags when users access a farm settings page using ‘set other host’.

    Check the newer update, KB5002816
    Updates for SharePoint Server 2019 end on July 14, 2026.
    Known issues: 1 open Organizations and IT administrators
    • Users may see “4gab5" event tags logged in the SharePoint Unified Logging System (ULS) logs when they access sitedirectorysettings.aspx by using ‘set other host’.

    Key changes 1 CVE · 3 changes

    • Improved Audit logs: Users must choose the library for storing audit logs before they can proceed.
    • Fix SharePoint Server: A Microsoft SharePoint remote code execution vulnerability is fixed.
    • Fix SharePoint Server: The GB18030-2022 China certificate issue is fixed.

    Read update Source: Microsoft

    Build
    16.0.10417.20068
    Security
    1 vulnerability fixed
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002796

    Six vulnerabilities covered ahead of July 2026 support end

    Covers six Important security vulnerabilities. SharePoint Server 2019 support ends July 14, 2026.

    Check the newer update, KB5002803
    Support for SharePoint Server 2019 ends July 14, 2026, for all editions.

    Key security notes 6 CVEs

    • CVSS 8.8 CVE-2025-59228: Microsoft SharePoint Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2025-59237: Microsoft SharePoint Remote Code Execution Vulnerability
    • CVSS 7.8 CVE-2025-59222: Microsoft Word Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20059
    Security
    6 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002775

    Three important server vulnerabilities addressed

    Addresses three important-severity vulnerabilities in SharePoint Server 2019. Updates for this version are scheduled to end on July 14, 2026.

    Check the newer update, KB5002796
    Updates for SharePoint Server 2019 are scheduled to end on July 14, 2026.

    Key security notes 3 CVEs

    • CVSS 8.8 CVE-2025-54897: Microsoft SharePoint Remote Code Execution Vulnerability
    • CVSS 7.8 CVE-2025-54906: Microsoft Office Remote Code Execution Vulnerability
    • CVSS 7.1 CVE-2025-54905: Microsoft Word Information Disclosure Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20047
    Security
    3 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002769

    Critical Word remote-code flaw addressed; calendar setup issue remains

    A critical Word remote-code flaw is addressed, and support can be enabled for two Business Connectivity Services system types. Calendar overlay settings may have an issue during configuration.

    Check the newer update, KB5002775
    SharePoint Server 2019 updates end on July 14, 2026.
    Known issues: 1 open Organizations and IT administrators
    • After you install this update, you might experience an issue when you configure calendar overlay settings.

    Key changes 4 CVEs · 2 changes

    • Improved Cloud Search Service Application: A warning appears before deleting a Cloud Search Service Application if users have not confirmed that hybrid indexes are removed.
    • Fix Business Connectivity Services: Business Connectivity Services can use two system types after support is enabled for trusted models.
    • Critical CVE-2025-53733: Microsoft Word Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20041
    Security
    4 fixed · 1 critical
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Out-of-band security update
    Out-of-band Zero-day

    KB5002754

    Actively exploited remote-code flaw patched; page loading issue remains

    Patches an actively exploited flaw that could let attackers run code on the server. Some page resources might still fail to load; farm administrators have a workaround.

    Check the newer update, KB5002769
    SharePoint Server 2019 reaches the end of updates on July 14, 2026.
    Known issues: 2 open Organizations and IT administrators
    • $farm.ContainsGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")
    • $farm.RemoveGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")

    Key changes 2 CVEs · 1 change

    • Fix SharePoint Server: The update resolves vulnerabilities that could let attackers run code or spoof SharePoint Server.
    • Exploited CVE-2025-53770: Microsoft SharePoint Server Remote Code Execution Vulnerability
    • CVSS 6.5 CVE-2025-53771: Microsoft SharePoint Server Spoofing Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20037
    Security
    2 fixed · 1 critical · 1 exploited
    Restart
    Required
  • SharePoint Server 2019 SharePoint Server 2019 Security update

    KB5002741

    Critical Word and server code execution vulnerabilities addressed

    Addresses four vulnerabilities, including two Critical remote code execution flaws. SharePoint Server 2019 is scheduled to stop receiving updates on July 14, 2026.

    Check the newer update, KB5002754
    Updates for SharePoint Server 2019 are scheduled to end on July 14, 2026.

    Key security notes 4 CVEs

    • Critical CVE-2025-49704: Microsoft SharePoint Remote Code Execution Vulnerability
    • Critical CVE-2025-49703: Microsoft Word Remote Code Execution Vulnerability
    • CVSS 8.8 CVE-2025-49701: Microsoft SharePoint Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.10417.20027
    Security
    4 fixed · 2 critical
    Restart
    Required