SharePoint Server updates

SharePoint Server updates

• SharePoint Server 2019 SharePoint Server 2019 Security update

  KB5002825 Jan 13, 2026

  Remote code execution flaws resolved; RBS migration duplication fixed

  The update resolves seven Important vulnerabilities and fixes a China certification issue and duplicate data during Remote Blob Storage migration.

  Check the newer update, KB5002834

  SharePoint Server 2019 reaches the end of updates for all editions on July 14, 2026.

  Key changes 7 CVEs · 3 changes

  • Fix SharePoint Server security: The update resolves vulnerabilities involving elevation of privilege, remote code execution, information disclosure, and spoofing.
  • Fix GB18030-2022 certification: The GB18030-2022 China certification issue is fixed.
  • Fix Remote Blob Storage migration: Data duplication during Remote Blob Storage migration is fixed.

  Read update → Source: Microsoft ↗

• SharePoint Server 2016 SharePoint Server 2016 Security update

  KB5002828 Jan 13, 2026

  Seven security flaws addressed; Remote Blob Storage duplication fixed

  The update addresses seven security vulnerabilities and fixes data duplication during Remote Blob Storage migration. SharePoint Server 2016 updates end on July 14, 2026.

  Check the newer update, KB5002841

  SharePoint Server 2016 updates end on July 14, 2026.

  Key changes 7 CVEs · 4 changes

  • New SharePoint Framework: The update delivers Feature Pack 2, which includes SharePoint Framework.
  • New Feature Pack 1: The update also includes Feature Pack 1 features: Administrative Actions Logging, MinRole enhancements, SharePoint Custom Tiles, Hybrid...
  • Fix Security: The update addresses seven security vulnerabilities affecting Office Click-to-Run, SharePoint, and Word.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002815 Dec 9, 2025

  Spoofing flaw closed; 25H2 features and workflow fixes added

  The update closes a SharePoint Server spoofing vulnerability and introduces the 25H2 feature update, alongside accessibility, crawling, workflow, search and rendering fixes.

  Check the newer update, KB5002822

  Key changes 1 CVE · 12 changes

  • New SharePoint Server Subscription Edition: The Version 25H2 feature update is introduced and will be included in future public updates.
  • Improved Audit logs: Users must specify the library for storing audit logs before starting the process.
  • Fix SharePoint Server: A spoofing vulnerability in SharePoint Server is fixed.

  Read update → Source: Microsoft ↗

• SharePoint Server 2019 SharePoint Server 2019 Security update

  KB5002816 Dec 9, 2025

  Outlook and Word code-execution flaws addressed; certification issue fixed

  The update addresses four Important vulnerabilities affecting Outlook and Word, and fixes a GB18030-2022 China certification issue in SharePoint Server 2019.

  Check the newer update, KB5002825

  Updates for SharePoint Server 2019 are scheduled to end on July 14, 2026.

  Key changes 4 CVEs · 2 changes

  • Fix Microsoft Outlook and Word: The update resolves remote code execution vulnerabilities affecting Microsoft Outlook and Microsoft Word.
  • Fix SharePoint Server: The GB18030-2022 China certification issue is fixed.
  • CVSS 7.8 CVE-2025-62558: Microsoft Word Remote Code Execution Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server 2016 SharePoint Server 2016 Security update

  KB5002821 Dec 9, 2025

  Outlook and Word code-execution flaws addressed; HTTP scanning enabled

  The update addresses remote code execution vulnerabilities affecting Outlook and Word, and enables scanning of HTTP request bodies in SharePoint 2016. SharePoint Server 2016 updates end July 14, 2026.

  Check the newer update, KB5002828

  Updates for all editions of SharePoint Server 2016 end July 14, 2026.

  Key changes 4 CVEs · 9 changes

  • New SharePoint Framework (SPFx): SharePoint Server 2016 receives the SharePoint Framework.
  • New Administrative Actions Logging: SharePoint Server 2016 receives Administrative Actions Logging.
  • New MinRole enhancements: SharePoint Server 2016 receives MinRole enhancements.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002800 Nov 11, 2025

  Remote code execution flaw closed; 25H2 features arrive

  Closes a SharePoint remote code execution vulnerability and introduces the 25H2 feature update, which will be included in future public updates.

  Check the newer update, KB5002815

  Known issues: 1 open Organizations and IT administrators

  • Users may see “4gab5" event tags logged in the SharePoint Unified Logging System (ULS) logs when they access sitedirectorysettings.aspx by using ‘set other host’.

  Key changes 1 CVE · 4 changes

  • New SharePoint Server Subscription Edition Version 25H2: The Version 25H2 feature update is introduced and will be included in future public updates.
  • Fix SharePoint Server: Closes a remote code execution vulnerability in SharePoint Server.
  • Fix Certificates: The GB18030-2022 certificate issue is fixed.

  Read update → Source: Microsoft ↗

• SharePoint Server 2019 SharePoint Server 2019 Security update

  KB5002803 Nov 11, 2025

  Remote code execution flaw closed; China certificate issue fixed

  Closes an Important SharePoint remote code execution vulnerability, CVE-2025-62204, and fixes a China certificate issue. A known issue can log event tags when users access a farm settings page using ‘set other host’.

  Check the newer update, KB5002816

  Updates for SharePoint Server 2019 end on July 14, 2026.

  Known issues: 1 open Organizations and IT administrators

  • Users may see “4gab5" event tags logged in the SharePoint Unified Logging System (ULS) logs when they access sitedirectorysettings.aspx by using ‘set other host’.

  Key changes 1 CVE · 3 changes

  • Improved Audit logs: Users must choose the library for storing audit logs before they can proceed.
  • Fix SharePoint Server: A Microsoft SharePoint remote code execution vulnerability is fixed.
  • Fix SharePoint Server: The GB18030-2022 China certificate issue is fixed.

  Read update → Source: Microsoft ↗

• SharePoint Server 2016 SharePoint Server 2016 Security update

  KB5002805 Nov 11, 2025

  Remote code execution flaw fixed; farm-host access issue remains

  The update addresses a SharePoint remote code execution vulnerability and removes permissions that caused failures during later update installations. An open issue can log event tags when users access a settings page through an additional farm host.

  Check the newer update, KB5002821

  Updates for all SharePoint Server 2016 editions end July 14, 2026.

  Known issues: 1 open Organizations and IT administrators

  • Users may see “4gab5" event tags logged in the SharePoint Unified Logging System (ULS) logs when they access sitedirectorysettings.aspx by using ‘set other host’.

  Key changes 1 CVE · 9 changes

  • New SharePoint Framework (SPFx): SharePoint Server 2016 includes SharePoint Framework (SPFx).
  • New Administrative Actions Logging: The update includes Administrative Actions Logging.
  • New MinRole enhancements: The update includes MinRole enhancements.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002786 Oct 14, 2025

  Closes two remote-code flaws and adds the 25H2 feature update

  The update closes two Important SharePoint remote code execution vulnerabilities and adds the 25H2 feature update. Farms using 2013-type workflows need the August 2025 Workflow Manager update first.

  Check the newer update, KB5002800

  Key changes 2 CVEs · 9 changes

  • New SharePoint Server Subscription Edition Version 25H2: The 25H2 feature update is included, and future public updates will include it too.
  • Improved LAYOUTS folder permissions: Write permission is denied by default for the WSS_WPG and IIS_IUSRS groups on the LAYOUTS folder, to help resolve update installation i...
  • Improved Classic Workflow Manager: If workflow functionality breaks, you can restore operations by enabling the debug flag and updating the farm.

  Read update → Source: Microsoft ↗

• SharePoint Server 2019 SharePoint Server 2019 Security update

  KB5002796 Oct 14, 2025

  Six vulnerabilities covered ahead of July 2026 support end

  Covers six Important security vulnerabilities. SharePoint Server 2019 support ends July 14, 2026.

  Check the newer update, KB5002803

  Support for SharePoint Server 2019 ends July 14, 2026, for all editions.

  Key security notes 6 CVEs

  • CVSS 8.8 CVE-2025-59228: Microsoft SharePoint Remote Code Execution Vulnerability
  • CVSS 8.8 CVE-2025-59237: Microsoft SharePoint Remote Code Execution Vulnerability
  • CVSS 7.8 CVE-2025-59222: Microsoft Word Remote Code Execution Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server 2016 SharePoint Server 2016 Security update

  KB5002788 Oct 14, 2025

  Fixes 6 vulnerabilities

  Addresses six Important vulnerabilities. SharePoint Server 2016 updates are scheduled to end on July 14, 2026.

  Check the newer update, KB5002805

  Updates for SharePoint Server 2016 are scheduled to end on July 14, 2026.

  Key security notes 6 CVEs

  • CVSS 8.8 CVE-2025-59228: Microsoft SharePoint Remote Code Execution Vulnerability
  • CVSS 8.8 CVE-2025-59237: Microsoft SharePoint Remote Code Execution Vulnerability
  • CVSS 7.8 CVE-2025-59222: Microsoft Word Remote Code Execution Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002784 Sep 9, 2025

  Remote code execution flaw resolved; 25H2 feature update arrives

  A SharePoint remote code execution vulnerability, CVE-2025-54897, is resolved. The update also introduces the 25H2 feature update and changes workflow requirements, AMSI defaults, and machine-key rotation.

  Check the newer update, KB5002786

  Key changes 1 CVE · 9 changes

  • New SharePoint Server Subscription Edition: The SharePoint Server Subscription Edition 25H2 feature update is included.
  • New SharePoint Management Shell: You can use a new cmdlet to check that Windows Defender components are installed and active and that SharePoint antimalware scanning is...
  • Improved Workflows: SharePoint workflows now require the latest SharePoint Workflow Manager update.

  Read update → Source: Microsoft ↗

• SharePoint Server 2019 SharePoint Server 2019 Security update

  KB5002775 Sep 9, 2025

  Three important server vulnerabilities addressed

  Addresses three important-severity vulnerabilities in SharePoint Server 2019. Updates for this version are scheduled to end on July 14, 2026.

  Check the newer update, KB5002796

  Updates for SharePoint Server 2019 are scheduled to end on July 14, 2026.

  Key security notes 3 CVEs

  • CVSS 8.8 CVE-2025-54897: Microsoft SharePoint Remote Code Execution Vulnerability
  • CVSS 7.8 CVE-2025-54906: Microsoft Office Remote Code Execution Vulnerability
  • CVSS 7.1 CVE-2025-54905: Microsoft Word Information Disclosure Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server 2016 SharePoint Server 2016 Security update

  KB5002778 Sep 9, 2025

  Fixes 3 vulnerabilities

  Addresses three Important vulnerabilities. Updates for SharePoint Server 2016 end on July 14, 2026.

  Check the newer update, KB5002788

  Updates for SharePoint Server 2016 end on July 14, 2026.

  Key security notes 3 CVEs

  • CVSS 8.8 CVE-2025-54897: Microsoft SharePoint Remote Code Execution Vulnerability
  • CVSS 7.8 CVE-2025-54906: Microsoft Office Remote Code Execution Vulnerability
  • CVSS 7.1 CVE-2025-54905: Microsoft Word Information Disclosure Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002773 Aug 12, 2025

  Calendar overlay settings may fail; search and list fixes included

  Closes one Important elevation-of-privilege vulnerability (CVE-2025-53760), improves search and list controls, and fixes SharePoint issues. Calendar overlay settings might have problems after installation.

  Check the newer update, KB5002784

  Known issues: 1 open

  • After you install this update, you might experience an issue when you configure calendar overlay settings.

  Key changes 1 CVE · 20 changes

  • New Property pane: A new option lets users hide the command bar in list and document library web parts.
  • Improved People Picker: The People Picker search experience is improved.
  • Improved Hybrid search: New hybrid search performs better.

  Read update → Source: Microsoft ↗

• SharePoint Server 2019 SharePoint Server 2019 Security update

  KB5002769 Aug 12, 2025

  Critical Word remote-code flaw addressed; calendar setup issue remains

  A critical Word remote-code flaw is addressed, and support can be enabled for two Business Connectivity Services system types. Calendar overlay settings may have an issue during configuration.

  Check the newer update, KB5002775

  SharePoint Server 2019 updates end on July 14, 2026.

  Known issues: 1 open Organizations and IT administrators

  • After you install this update, you might experience an issue when you configure calendar overlay settings.

  Key changes 4 CVEs · 2 changes

  • Improved Cloud Search Service Application: A warning appears before deleting a Cloud Search Service Application if users have not confirmed that hybrid indexes are removed.
  • Fix Business Connectivity Services: Business Connectivity Services can use two system types after support is enabled for trusted models.
  • Critical CVE-2025-53733: Microsoft Word Remote Code Execution Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server 2016 SharePoint Server 2016 Security update

  KB5002771 Aug 12, 2025

  Critical Word flaw patched; BCS support needs manual enabling

  A critical Word flaw that could allow remote code execution is patched. BCS support for two system types still needs manual enabling, and calendar overlay settings might have an issue.

  Check the newer update, KB5002778

  SharePoint Server 2016 updates end on July 14, 2026.

  Known issues: 1 open Organizations and IT administrators

  • After you install this update, you might experience an issue when you configure calendar overlay settings.

  Key changes 4 CVEs · 9 changes

  • New SharePoint Framework (SPFx): SharePoint Framework is included.
  • New Administrative Actions Logging: Administrative Actions Logging is included.
  • New MinRole enhancements: MinRole enhancements are included.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Out-of-band security update

  Out-of-band Zero-day

  KB5002768 Jul 21, 2025

  Exploited remote-code flaw patched; page resources may fail to load

  Closes a critical SharePoint Server remote-code execution flaw that attackers are exploiting. Some SharePoint page resources might fail to load after installation.

  Check the newer update, KB5002773

  Known issues: 2 open Organizations and IT administrators

  • $farm.ContainsGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")
  • $farm.RemoveGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")

  Key changes 2 CVEs · 2 changes

  • Fix SharePoint Server: Closes a remote code execution vulnerability in SharePoint Server.
  • Fix SharePoint Server: Closes a spoofing vulnerability in SharePoint Server.
  • Exploited CVE-2025-53770: Microsoft SharePoint Server Remote Code Execution Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server 2019 SharePoint Server 2019 Out-of-band security update

  Out-of-band Zero-day

  KB5002754 Jul 21, 2025

  Actively exploited remote-code flaw patched; page loading issue remains

  Patches an actively exploited flaw that could let attackers run code on the server. Some page resources might still fail to load; farm administrators have a workaround.

  Check the newer update, KB5002769

  SharePoint Server 2019 reaches the end of updates on July 14, 2026.

  Known issues: 2 open Organizations and IT administrators

  • $farm.ContainsGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")
  • $farm.RemoveGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")

  Key changes 2 CVEs · 1 change

  • Fix SharePoint Server: The update resolves vulnerabilities that could let attackers run code or spoof SharePoint Server.
  • Exploited CVE-2025-53770: Microsoft SharePoint Server Remote Code Execution Vulnerability
  • CVSS 6.5 CVE-2025-53771: Microsoft SharePoint Server Spoofing Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server 2016 SharePoint Server 2016 Out-of-band security update

  Out-of-band Zero-day

  KB5002760 Jul 21, 2025

  Critical remote-code flaw under attack; page resources may fail

  A critical remote-code flaw under active attack is fixed. Some SharePoint page resources might still fail to load, and the update includes a workaround.

  Check the newer update, KB5002771

  SharePoint Server 2016 updates end on July 14, 2026.

  Known issues: 2 open Organizations and IT administrators

  • $farm.ContainsGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")
  • $farm.RemoveGenericAllowedListValue("SignOutRefererAllowList", "<resource path>")

  Key changes 2 CVEs · 8 changes

  • New SharePoint Framework (SPFx): SharePoint Server 2016 gains the SharePoint Framework.
  • New Administrative Actions Logging: SharePoint Server 2016 gains Administrative Actions Logging.
  • New MinRole enhancements: SharePoint Server 2016 gains MinRole enhancements.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002751 Jul 8, 2025

  Remote code execution and spoofing flaws closed; search and RSS fixed

  Closes two Important SharePoint vulnerabilities and fixes search resilience during extended server shutdowns and RSS pages that fail after a .NET Framework 4.8 upgrade.

  Check the newer update, KB5002768

  Key changes 2 CVEs · 3 changes

  • New Hybrid Search: The new Hybrid Search feature is enabled for the Standard release ring.
  • Fix SharePoint search topology: SharePoint search is more resilient during extended server shutdowns, particularly when Crawler components remain active.
  • Fix RSS Feed pages: RSS Feed pages load correctly after an upgrade to .NET Framework 4.8.

  Read update → Source: Microsoft ↗

• SharePoint Server 2019 SharePoint Server 2019 Security update

  KB5002741 Jul 8, 2025

  Critical Word and server code execution vulnerabilities addressed

  Addresses four vulnerabilities, including two Critical remote code execution flaws. SharePoint Server 2019 is scheduled to stop receiving updates on July 14, 2026.

  Check the newer update, KB5002754

  Updates for SharePoint Server 2019 are scheduled to end on July 14, 2026.

  Key security notes 4 CVEs

  • Critical CVE-2025-49704: Microsoft SharePoint Remote Code Execution Vulnerability
  • Critical CVE-2025-49703: Microsoft Word Remote Code Execution Vulnerability
  • CVSS 8.8 CVE-2025-49701: Microsoft SharePoint Remote Code Execution Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server 2016 SharePoint Server 2016 Security update

  KB5002744 Jul 8, 2025

  Critical remote-code execution flaws in Word and server code

  Addresses four vulnerabilities, including two critical remote-code execution flaws affecting Word and the server. The update can request a restart.

  Check the newer update, KB5002760

  Key security notes 4 CVEs

  • Critical CVE-2025-49704: Microsoft SharePoint Remote Code Execution Vulnerability
  • Critical CVE-2025-49703: Microsoft Word Remote Code Execution Vulnerability
  • CVSS 8.8 CVE-2025-49701: Microsoft SharePoint Remote Code Execution Vulnerability

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002736 Jun 10, 2025

  Critical remote-code flaw fixed; Hybrid Search flight remains blocked

  The update fixes three vulnerabilities, including one Critical remote-code execution flaw, CVE-2025-47172. The new Hybrid Search flight still is not enabled in the Standard release ring; support can provide a workaround.

  Check the newer update, KB5002751

  Known issues: 1 open Organizations and IT administrators

  • The flight for the new Hybrid Search feature in the Standard release ring was not enabled successfully in the May update, please contact the support team to get the workaround to enable the flight.

  Key changes 3 CVEs · 12 changes

  • New List web part: A setting lets you hide the command bar in the List web part.
  • Improved Hybrid Search: The update supports a configuration for the hybrid search endpoint; use the latest onboarding script to try this update.
  • Improved Hybrid Search: Customers must use the new hybrid search endpoint.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002709 May 13, 2025

  Remote code execution and privilege escalation flaws fixed

  Resolves four Important security vulnerabilities in SharePoint Server, including remote code execution and elevation of privilege flaws. It also adds hybrid search support and fixes four SharePoint issues.

  Check the newer update, KB5002736

  Search Content Service (SCS) is scheduled to retire on June 30, 2025. The page does not say that readers need to take action because of the retirement.

  Key changes 4 CVEs · 7 changes

  • New Hybrid search: A new command supports retrieving the VroomId in hybrid search scenarios.
  • New Hybrid Search: Hybrid Search is scheduled to become available in the Standard release ring. A script onboards the new Hybrid Search Experience process...
  • Improved Search Content Service: Search Content Service (SCS) is scheduled to retire on June 30, 2025.

  Read update → Source: Microsoft ↗