SharePoint Server Subscription Edition

Build history

• SharePoint Server SE SharePoint Server SE Security update

  KB5002649 Oct 8, 2024

  Elevation-of-privilege flaw fixed; Document Set updates run faster

  Resolves an elevation-of-privilege vulnerability and improves Document Set template updates, while also addressing three SharePoint Server Subscription Edition issues.

  Check the newer update, KB5002651

  Key changes 1 CVE · 4 changes

  • Improved Document Set template update job: The Document Set template update job runs more efficiently.
  • Fix JavaScript mutation events: The impact of the 2024 JavaScript mutation-events deprecation on product functionality is mitigated.
  • Fix Saving documents to a SharePoint library: An incorrect script error message no longer appears when you save a document to a SharePoint library using Microsoft 365.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002640 Sep 10, 2024

  Critical code-execution and denial-of-service flaws addressed

  The update resolves five vulnerabilities, including two critical remote-code-execution flaws and a denial-of-service flaw. It also introduces Version 24H2 and leaves open an issue that can block workflow publishing.

  Check the newer update, KB5002649

  Known issues: 3 open Organizations and IT administrators

  • After you apply this update, you might experience an issue that affects the deserialization of custom types that inherit from IDictionary.
  • You might experience an issue in which SharePoint workflows can't be published because the unauthorized type is blocked.
  • While Basic authentication for existing web applications should continue to work, you will no longer be able to configure Basic authentication for new or existing web apps through Central Administration or PowerShell.

  Key changes 5 CVEs · 9 changes

  • New SharePoint Server Subscription Edition Version 24H2: The Version 24H2 feature update is included, and future public updates will include it too.
  • Improved Logging: Logging provides more information about the invalid URL field schema.
  • Fix Lookup columns: Lookup columns that get data from a date-time column show the correct data when the view also contains a JSON-formatted column.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002606 Jul 9, 2024

  Critical server code flaw fixed; Google Docs paste works again

  Fixes a critical remote code execution vulnerability and restores several SharePoint features, including pasting Google Docs content into a text web part.

  Check the newer update, KB5002640

  Key changes 4 CVEs · 4 changes

  • Fix Text web part: You can copy content from Google Docs and paste it into a text web part on a modern page.
  • Fix ListView Command Set extension: The ListView Command Set extension works in debugging mode.
  • Fix Document library: Bulk editing works in a flat view of a document library.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002603 Jun 11, 2024

  Remote code execution flaw closed; farm and library issues fixed

  Closes one Important-severity remote code execution vulnerability and fixes several SharePoint Server and Project Server problems, including farm setup, document-library behavior and high CPU usage.

  Check the newer update, KB5002606

  Key changes 1 CVE · 9 changes

  • Fix SharePoint Server farm: A new server gets the right configuration when it joins an existing farm with the Antimalware Scanning Interface enabled.
  • Fix Distributed cache: Deleting a remote server no longer removes the distributed cache registry key.
  • Fix Calendar: A list calendar opened from Quick Launch switches to the classic view as expected.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002599 May 14, 2024

  Critical remote-code execution and information-disclosure flaws fixed

  The update fixes two SharePoint Server vulnerabilities, including a critical remote-code-execution flaw, and resolves six issues affecting farm setup, search, tags, links, events, and list updates.

  Check the newer update, KB5002603

  Key changes 2 CVEs · 6 changes

  • Fix SharePoint farm: You can add a new server to an existing farm even when the farm uses a certificate managed by Certificate Management.
  • Fix Modern search page: Office documents open in Office Online when you select them in search results, instead of downloading.
  • Fix Managed metadata: The tag dialog opens when you select Add Tag in the details pane.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002581 Apr 9, 2024

  Spoofing flaw closed; Web.config errors and file uploads fixed

  The update resolves an Important SharePoint Server spoofing vulnerability and fixes several issues, including oversized Web.config files and failed document-library uploads.

  Check the newer update, KB5002599

  Key changes 1 CVE · 7 changes

  • Improved Capital city name: The capital city of Kazakhstan is named Astana instead of Nur-Sultan.
  • Improved Antimalware Scan Interface (AMSI): Antimalware Scan Interface integration is more reliable.
  • Fix SharePoint Server: A spoofing vulnerability in SharePoint Server is resolved.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002564 Mar 12, 2024

  Remote-code flaw fixed; farm joins may fail after the update

  Fixes an Important SharePoint Server remote-code execution vulnerability and adds the Version 24H1 feature update. It also introduces a Microsoft.Owin change that requires a SharePoint upgrade action before sites can be browsed.

  Check the newer update, KB5002581

  Known issues: 2 open Organizations and IT administrators

  • After you install this security update, you may encounter an issue in which servers cannot join an existing SharePoint farm.
  • This security update also introduces a newer version of the Microsoft.Owin component.

  Key changes 1 CVE · 8 changes

  • New SharePoint Server Subscription Edition: The Version 24H1 feature update is included, and future public updates will include it too.
  • Improved Content Security Policy: Farm administrators can disable SharePoint's Content Security Policy HTTP header in SharePoint Pages.
  • Fix Modern List web part: The modern List web part no longer freezes when you select See all for a grouped view if the site URL contains an apostrophe.

  Read update → Source: Microsoft ↗

• SharePoint Server SE SharePoint Server SE Security update

  KB5002540 Jan 9, 2024

  Remote code execution flaw closed; list and document access fixed

  Resolves an Important-severity remote code execution vulnerability and fixes several list, search, and document access problems.

  Check the newer update, KB5002564

  Key changes 1 CVE · 5 changes

  • Fix SharePoint Server: A remote code execution vulnerability in SharePoint Server is resolved.
  • Fix Lists: Bulk deletion of multiple list items works in the modern interface when Japanese characters are included in the site URL.
  • Fix Search: PDF files can be opened from the browser's search suggestions in the modern experience.

  Read update → Source: Microsoft ↗