Skip to the content
The Update Bureau

SharePoint Server

SharePoint Server updates

All published releases for SharePoint Server, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 10, 2026.

15 active known issues →

SharePoint Server updates

  • SharePoint Server SE SharePoint Server SE Security update

    KB5002705

    Remote code execution flaw closed; authentication checks strengthened

    The update addresses a SharePoint remote code execution vulnerability and strengthens security and validation during authentication.

    Check the newer update, KB5002709

    Key changes 2 CVEs · 2 changes

    • Improved SharePoint Server Subscription Edition: Authentication processes get stronger security and validation checks.
    • Fix SharePoint Server: A remote code execution vulnerability in SharePoint is addressed.
    • CVSS 8.8 CVE-2025-29794: Microsoft SharePoint Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    16.0.18526.20172
    Security
    2 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002681

    Remote code execution flaw closed; four list problems fixed

    The update resolves a SharePoint Server remote code execution vulnerability and fixes four problems with list displays, account validation, and creating list items.

    Check the newer update, KB5002705

    Key changes 1 CVE · 4 changes

    • Fix Computed columns: In modern lists, computed columns show their actual values instead of IDs when the fields are not visible.
    • Fix Information panel: The information panel validates Windows accounts in Person columns when a web application uses multiple authentication modes.
    • Fix Date column: Date columns show the correct value instead of “30.12.1899” when a list contains a column with custom formatting.

    Read update Source: Microsoft

    Build
    16.0.17928.20396
    Security
    1 vulnerability fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002676

    Remote code execution and spoofing flaws addressed; search failures fixed

    The update addresses SharePoint Server remote code execution and spoofing vulnerabilities, and fixes several search, import, and web part problems.

    Check the newer update, KB5002681

    Key changes 3 CVEs · 7 changes

    • Improved Search Content Service (SCS): Hybrid search requests include a User-Agent header.
    • Fix Cross-site collection moves: Users no longer see the unsupported search box for cross-site collection moves.
    • Fix Client-Side Object Model (CSOM): Exporting a document set no longer fails with an EventTrace initializer error.

    Read update Source: Microsoft

    Build
    16.0.17928.20356
    Security
    3 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002658

    Remote code execution and privilege flaws fixed alongside page issues

    The update addresses four Important security vulnerabilities, including remote code execution and elevation of privilege, and fixes four SharePoint page and upload problems.

    Check the newer update, KB5002676

    Key changes 4 CVEs · 4 changes

    • Fix SPSerialization: Pages with third-party web parts or controls load successfully when SPSerialization is restricted using the new allow-list mechanism.
    • Fix Command bar: Command bar elements no longer disappear when you zoom the browser in or out.
    • Fix Folder upload: You can upload folders whose names contain similar characters from the extended range of supported characters.

    Read update Source: Microsoft

    Build
    16.0.17928.20290
    Security
    4 vulnerabilities fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002651

    Security-related features get defense-in-depth updates

    The update adds defense-in-depth changes to security-related features. It includes one unrated vulnerability; none are listed as critical, publicly disclosed, or exploited.

    Check the newer update, KB5002658

    Key changes 1 CVE · 1 change

    • Improved Security-related features: Security-related features get defense-in-depth updates.
    • Security ADV240001: Microsoft SharePoint Server Defense in Depth Update

    Read update Source: Microsoft

    Build
    16.0.17928.20238
    Security
    1 vulnerability fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002649

    Elevation-of-privilege flaw fixed; Document Set updates run faster

    Resolves an elevation-of-privilege vulnerability and improves Document Set template updates, while also addressing three SharePoint Server Subscription Edition issues.

    Check the newer update, KB5002651

    Key changes 1 CVE · 4 changes

    • Improved Document Set template update job: The Document Set template update job runs more efficiently.
    • Fix JavaScript mutation events: The impact of the 2024 JavaScript mutation-events deprecation on product functionality is mitigated.
    • Fix Saving documents to a SharePoint library: An incorrect script error message no longer appears when you save a document to a SharePoint library using Microsoft 365.

    Read update Source: Microsoft

    Build
    16.0.17928.20162
    Security
    1 vulnerability fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002640

    Critical code-execution and denial-of-service flaws addressed

    The update resolves five vulnerabilities, including two critical remote-code-execution flaws and a denial-of-service flaw. It also introduces Version 24H2 and leaves open an issue that can block workflow publishing.

    Check the newer update, KB5002649
    Known issues: 3 open Organizations and IT administrators
    • After you apply this update, you might experience an issue that affects the deserialization of custom types that inherit from IDictionary.
    • You might experience an issue in which SharePoint workflows can't be published because the unauthorized type is blocked.
    • While Basic authentication for existing web applications should continue to work, you will no longer be able to configure Basic authentication for new or existing web apps through Central Administration or PowerShell.

    Key changes 5 CVEs · 9 changes

    • New SharePoint Server Subscription Edition Version 24H2: The Version 24H2 feature update is included, and future public updates will include it too.
    • Improved Logging: Logging provides more information about the invalid URL field schema.
    • Fix Lookup columns: Lookup columns that get data from a date-time column show the correct data when the view also contains a JSON-formatted column.

    Read update Source: Microsoft

    Build
    16.0.17928.20086
    Security
    5 fixed · 2 critical
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002606

    Critical server code flaw fixed; Google Docs paste works again

    Fixes a critical remote code execution vulnerability and restores several SharePoint features, including pasting Google Docs content into a text web part.

    Check the newer update, KB5002640

    Key changes 4 CVEs · 4 changes

    • Fix Text web part: You can copy content from Google Docs and paste it into a text web part on a modern page.
    • Fix ListView Command Set extension: The ListView Command Set extension works in debugging mode.
    • Fix Document library: Bulk editing works in a flat view of a document library.

    Read update Source: Microsoft

    Build
    16.0.17328.20424
    Security
    4 fixed · 1 critical
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002603

    Remote code execution flaw closed; farm and library issues fixed

    Closes one Important-severity remote code execution vulnerability and fixes several SharePoint Server and Project Server problems, including farm setup, document-library behavior and high CPU usage.

    Check the newer update, KB5002606

    Key changes 1 CVE · 9 changes

    • Fix SharePoint Server farm: A new server gets the right configuration when it joins an existing farm with the Antimalware Scanning Interface enabled.
    • Fix Distributed cache: Deleting a remote server no longer removes the distributed cache registry key.
    • Fix Calendar: A list calendar opened from Quick Launch switches to the classic view as expected.

    Read update Source: Microsoft

    Build
    16.0.17328.20362
    Security
    1 vulnerability fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002599

    Critical remote-code execution and information-disclosure flaws fixed

    The update fixes two SharePoint Server vulnerabilities, including a critical remote-code-execution flaw, and resolves six issues affecting farm setup, search, tags, links, events, and list updates.

    Check the newer update, KB5002603

    Key changes 2 CVEs · 6 changes

    • Fix SharePoint farm: You can add a new server to an existing farm even when the farm uses a certificate managed by Certificate Management.
    • Fix Modern search page: Office documents open in Office Online when you select them in search results, instead of downloading.
    • Fix Managed metadata: The tag dialog opens when you select Add Tag in the details pane.

    Read update Source: Microsoft

    Build
    16.0.17328.20292
    Security
    2 fixed · 1 critical
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002581

    Spoofing flaw closed; Web.config errors and file uploads fixed

    The update resolves an Important SharePoint Server spoofing vulnerability and fixes several issues, including oversized Web.config files and failed document-library uploads.

    Check the newer update, KB5002599

    Key changes 1 CVE · 7 changes

    • Improved Capital city name: The capital city of Kazakhstan is named Astana instead of Nur-Sultan.
    • Improved Antimalware Scan Interface (AMSI): Antimalware Scan Interface integration is more reliable.
    • Fix SharePoint Server: A spoofing vulnerability in SharePoint Server is resolved.

    Read update Source: Microsoft

    Build
    16.0.17328.20246
    Security
    1 vulnerability fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002564

    Remote-code flaw fixed; farm joins may fail after the update

    Fixes an Important SharePoint Server remote-code execution vulnerability and adds the Version 24H1 feature update. It also introduces a Microsoft.Owin change that requires a SharePoint upgrade action before sites can be browsed.

    Check the newer update, KB5002581
    Known issues: 2 open Organizations and IT administrators
    • After you install this security update, you may encounter an issue in which servers cannot join an existing SharePoint farm.
    • This security update also introduces a newer version of the Microsoft.Owin component.

    Key changes 1 CVE · 8 changes

    • New SharePoint Server Subscription Edition: The Version 24H1 feature update is included, and future public updates will include it too.
    • Improved Content Security Policy: Farm administrators can disable SharePoint's Content Security Policy HTTP header in SharePoint Pages.
    • Fix Modern List web part: The modern List web part no longer freezes when you select See all for a grouped view if the site URL contains an apostrophe.

    Read update Source: Microsoft

    Build
    16.0.17328.20136
    Security
    1 vulnerability fixed
    Restart
    Required
  • SharePoint Server SE SharePoint Server SE Security update

    KB5002540

    Remote code execution flaw closed; list and document access fixed

    Resolves an Important-severity remote code execution vulnerability and fixes several list, search, and document access problems.

    Check the newer update, KB5002564

    Key changes 1 CVE · 5 changes

    • Fix SharePoint Server: A remote code execution vulnerability in SharePoint Server is resolved.
    • Fix Lists: Bulk deletion of multiple list items works in the modern interface when Japanese characters are included in the site URL.
    • Fix Search: PDF files can be opened from the browser's search suggestions in the modern experience.

    Read update Source: Microsoft

    Build
    16.0.16731.20462
    Security
    1 vulnerability fixed
    Restart
    Required