Applies To
SharePoint Server 2016

Summary

This security update resolves a Microsoft Word remote code execution vulnerability and Microsoft Word information disclosure vulnerability. To learn more about the vulnerabilities, see the following security advisories:

Notes: 

  • This is build 16.0.5513.1002 of the security update package.

  • To apply this security update, you must have the release version of Microsoft SharePoint Server 2016 installed on the computer.

This public update delivers Feature Pack 2 for SharePoint Server 2016. Feature Pack 2 contains the following feature:

  • SharePoint Framework (SPFx)

This public update also delivers all the features that were included in Feature Pack 1 for SharePoint Server 2016, including the following:

  • Administrative Actions Logging

  • MinRole enhancements

  • SharePoint Custom Tiles

  • Hybrid Taxonomy.

  • OneDrive API for SharePoint on-premises

  • OneDrive for Business modern user experience (available to Software Assurance customers)

The OneDrive for Business modern user experience requires an active Software Assurance contract at the time that the experience is enabled, either by installation of the public update or by manual enablement. If you don't have an active Software Assurance contract at the time of enablement, you must turn off the OneDrive for Business modern user experience.

For more information, see the following Microsoft Docs articles:

Improvements and fixes

This security update contains an improvement and a fix for the following nonsecurity issue in SharePoint Server 2016 Language Pack. To get the improvement and fix the issue completely, you have to install KB 5002771 together with this update.

  • Adds a warning when deleting a Cloud Search Service Application (Cloud SSA) if users have not verified that the hybrid indexes have been removed.

  • Fixes an issue in which users cannot use Business Connectivity Services (BCS) together with the DotNetAssembly or WebService system type, because these system types are not enabled by default. To support Business Data Connectivity (BDC) models that are based on the DotNetAssembly or WebService system type, enable the support by running the following commands in SharePoint Management Shell if you trust your BDC models:$farm = Get-SPFarm$farm.ServerDebugFlags.Add(57007)$farm.ServerDebugFlags.Add(57008)$farm.update()iisreset

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the standalone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More information

Security update deployment information

For deployment information about this update, see Deployments - Security Update Guide.

Security update replacement information

This security update replaces previously released security update 5002759.

File hash information

File name

SHA256 hash

wssloc2016-kb5002772-fullfile-x64-glb.exe

8BD0E6E03F465FCCFE01051D80C5A9161C8BE91213AFCEF36C86207F71309A11

File information

The global version of this update has the file attributes (or later file attributes) that are listed in the following table.

wss-x-none.msp file information

File name

File version

File size

Date

Time

Svrsetup.exe

16.0.5513.1000

802,272

26-Jul-2025

11:59

Wsssetup.dll

16.0.5513.1002

13,297,144

28-Jul-2025

18:39

wssmui-en-us.msp file information

File name

File version

File size

Date

Time

Accessserver.resources.dll.1033

16.0.5362.1000

79,776

26-Jul-2025

11:56

Accessservices.resources.dll.1033

16.0.5362.1000

91,520

26-Jul-2025

11:56

Addgalim.xap_1033

Not applicable

76,812

28-Jul-2025

18:38

Adodb.dll.deploy.1033

6.0.0.0

107,104

28-Jul-2025

18:38

Adodb.dll.deploy.forceupdate.1033

6.0.0.0

107,104

28-Jul-2025

18:38

Artleft.htm_1033

Not applicable

6,235

26-Jul-2025

12:02

Artlink.htm_1033

Not applicable

4,831

26-Jul-2025

12:02

Artright.htm_1033

Not applicable

5,314

26-Jul-2025

12:02

Avreport.htm_1033

Not applicable

8,624

26-Jul-2025

12:02

Berinc.css_1033

Not applicable

342,057

26-Jul-2025

12:02

Berlinmb.css_1033

Not applicable

342,337

26-Jul-2025

12:02

Btmast.htm_1033

Not applicable

25,419

26-Jul-2025

12:02

Catart.htm_1033

Not applicable

8,222

26-Jul-2025

12:02

Catwelco.htm_1033

Not applicable

8,375

26-Jul-2025

12:02

Conversion.excel.xlsrvintl.dll_1033

16.0.5446.1000

208,064

28-Jul-2025

06:51

Conversion.msoserver.msointl30_win32.dll_1033

16.0.5408.1000

72,680

26-Jul-2025

11:56

Conversion.msoserver.msoserverintl.dll_1033

16.0.5430.1000

1,356,264

26-Jul-2025

11:55

Core.rsx_1033

Not applicable

501,178

26-Jul-2025

12:02

Corev15.csst_1033

Not applicable

338,141

26-Jul-2025

12:02

Corev15.css_1033

Not applicable

338,141

26-Jul-2025

12:02

Corev15a.csst_1033

Not applicable

338,235

26-Jul-2025

12:02

Corev15a.css_1033

Not applicable

338,235

26-Jul-2025

12:02

Crosoft.performancepoint.scorecards.designerplugins.dll.deploy.1033

16.0.5513.1002

6,182,504

28-Jul-2025

18:38

Crosoft.performancepoint.scorecards.wizardframework.dll.deploy.1033

16.0.5513.1002

128,608

28-Jul-2025

18:38

Dashboarddesigner.exe.deploy.1033

16.0.5513.1002

975,376

28-Jul-2025

18:38

Dashboarddesigner.resources.dll.deploy.1033

16.0.5513.1002

430,176

28-Jul-2025

18:38

Ddmanager.exe.deploy.1033

16.0.5155.1000

305,424

28-Jul-2025

18:38

Ddmanager.intl.dll.deploy.1033

16.0.4666.1000

36,584

28-Jul-2025

18:38

Ddmanager.intl.resources.dll.deploy.1033

16.0.4666.1000

66,280

28-Jul-2025

18:38

Designer.application.1033

Not applicable

20,023

28-Jul-2025

18:38

Designer.exe.manifest.1033

Not applicable

34,843

28-Jul-2025

14:27

Discoverydownloadmanager.application.1033

Not applicable

20,101

28-Jul-2025

18:38

Discoverydownloadmanager.exe.manifest.1033

Not applicable

28,939

28-Jul-2025

14:27

Dlccore_llcc.resx_1033

Not applicable

137,677

28-Jul-2025

07:03

Dsigres.cab.x64.1033

Not applicable

237,653

28-Jul-2025

18:38

Dsigres.cab.x86.1033

Not applicable

199,833

28-Jul-2025

18:38

Entwiki.htm_1033

Not applicable

6,223

26-Jul-2025

12:02

Error.htm_1033

Not applicable

5,962

26-Jul-2025

12:02

Errorv4.htm_1033

Not applicable

3,217

26-Jul-2025

12:02

Filedlg.htm_0011_1033

Not applicable

5,902

26-Jul-2025

12:02

Fontdlg.htm_1033

Not applicable

3,123

26-Jul-2025

12:02

Fpext.msg_1033

Not applicable

171,130

28-Jul-2025

06:45

Iframe.htm_1033

Not applicable

396

26-Jul-2025

12:02

Iframe.htm_14_1033

Not applicable

398

26-Jul-2025

12:02

Ifsintl.dll.1033

16.0.5362.1000

202,640

26-Jul-2025

12:02

Instable.htm_1033

Not applicable

4,169

26-Jul-2025

12:02

Interop.cdosys.dll.deploy.1033

16.0.4666.1000

66,792

28-Jul-2025

18:38

Ipfshelp.xml.1033

Not applicable

209,847

26-Jul-2025

12:01

Irmrept.htm_1033

Not applicable

9,265

26-Jul-2025

12:02

Lyoninc.css_1033

Not applicable

343,494

26-Jul-2025

12:02

Lyonmb.css_1033

Not applicable

342,337

26-Jul-2025

12:02

Mergejsstringsd_js_1033

Not applicable

185,840

26-Jul-2025

12:02

Mergejsstrings_js_1033

Not applicable

180,230

26-Jul-2025

12:02

Microsoft.office.client.policy.dll.deploy.1033

16.0.4666.1000

29,912

28-Jul-2025

18:38

Microsoft.office.mhtexport.dll.deploy.1033

16.0.4666.1000

35,024

28-Jul-2025

18:38

Microsoft.office.project.shared.intl.loc.dll.1033

16.0.5161.1000

1,114,984

28-Jul-2025

07:03

Microsoft.office.server.powerpoint.dllhelp.xml_1033

Not applicable

27,970

26-Jul-2025

12:01

Microsoft.office.visio.server.dll_help.xml.1033

Not applicable

101,799

26-Jul-2025

12:01

Microsoft.performancepoint.scorecards.client.dll.deploy.1033

16.0.5513.1002

2,243,664

28-Jul-2025

18:38

Microsoft.performancepoint.scorecards.common.dll.deploy.1033

16.0.5513.1002

74,336

28-Jul-2025

18:38

Microsoft.sharepoint.client.dll.deploy.1033

16.0.5513.1002

660,384

28-Jul-2025

18:38

Microsoft.sharepoint.client.runtime.dll.deploy.1033

16.0.4666.1000

305,392

28-Jul-2025

18:38

Microsoft.sharepoint.client.runtime_1.dll.deploy.1033

16.0.4666.1000

305,392

28-Jul-2025

18:38

Microsoft.sharepoint.client.search.dll.deploy.1033

16.0.4666.1000

83,688

28-Jul-2025

18:38

Microsoft.sharepoint.client_1.dll.deploy.1033

16.0.5513.1002

660,384

28-Jul-2025

18:38

Moss.ecm.dll_help.xml_1033

Not applicable

134,275

26-Jul-2025

12:02

Mssmsg.dll.1033

16.0.4579.1000

201,472

26-Jul-2025

12:02

Mssmsg.dll_0001.1033

16.0.4579.1000

201,472

26-Jul-2025

12:02

Notesstp.exe.oss.1033

16.0.5452.1000

588,352

26-Jul-2025

12:02

Oslo.csst_1033

Not applicable

341,697

26-Jul-2025

12:02

Oslo.css_1033

Not applicable

341,697

26-Jul-2025

12:02

Osloapp.csst_1033

Not applicable

338,235

26-Jul-2025

12:02

Osloapp.css_1033

Not applicable

338,235

26-Jul-2025

12:02

Oslomb.css_1033

Not applicable

342,337

26-Jul-2025

12:02

Osoft.performancepoint.scorecards.designerworkspace.dll.deploy.1033

16.0.5513.1002

397,376

28-Jul-2025

18:38

Osrv.rsx_1033

Not applicable

8,762

26-Jul-2025

12:02

Osrvcmdh.xml_1033

Not applicable

157,127

26-Jul-2025

12:00

Osrvcore.rsx_1033

Not applicable

36,441

26-Jul-2025

12:02

Oss.search.powershell.help.xml_1033

Not applicable

1,452,298

26-Jul-2025

12:01

Ppsma.dll_help.xml_1033

Not applicable

171,723

26-Jul-2025

12:02

Ppt.conversion.ppintl.dll_1033

16.0.4954.1000

1,216,312

26-Jul-2025

11:56

Prjsvr.cmdlethelp.xml.1033

Not applicable

259,509

26-Jul-2025

12:01

Pwa.lcid.resx.1033

Not applicable

806,067

26-Jul-2025

12:02

Reviewpublishing_feature.xml_1033

Not applicable

1,155

28-Jul-2025

07:03

Reviewspd_feature.xml_1033

Not applicable

1,237

28-Jul-2025

07:03

Rformancepoint.scorecards.designerplugins.resources.dll.deploy.1033

16.0.5513.1002

3,919,896

28-Jul-2025

18:38

Rformancepoint.scorecards.wizardframework.resources.dll.deploy.1033

16.0.5513.1002

59,968

28-Jul-2025

18:38

Rgnlstng.xml_1033

Not applicable

26,648

26-Jul-2025

12:02

Rmancepoint.scorecards.designer.framework.resources.dll.deploy.1033

16.0.5513.1002

380,496

28-Jul-2025

18:38

Rmancepoint.scorecards.designer.workspace.resources.dll.deploy.1033

16.0.5513.1002

26,640

28-Jul-2025

18:38

Rosoft.performancepoint.common.calculation.resources.dll.deploy.1033

16.0.5513.1002

35,336

28-Jul-2025

18:38

Rosoft.performancepoint.scorecards.client.resources.dll.deploy.1033

16.0.5513.1002

1,375,840

28-Jul-2025

18:38

Rosoft.performancepoint.scorecards.common.resources.dll.deploy.1033

16.0.5513.1002

27,696

28-Jul-2025

18:38

Selcolor.htm_1033

Not applicable

12,165

26-Jul-2025

12:02

Signaturesspd_feature.xml_1033

Not applicable

1,173

28-Jul-2025

07:03

Soft.performancepoint.common.calculation.dll.deploy.1033

16.0.5513.1002

120,864

28-Jul-2025

18:38

Soft.performancepoint.scorecards.designer.framework.dll.deploy.1033

16.0.5513.1002

950,376

28-Jul-2025

18:38

Sp.jsgrid.res.js_1033

Not applicable

5,111

26-Jul-2025

12:02

Sp.jsgrid.res.resx_1033

Not applicable

16,415

26-Jul-2025

12:02

Sp.res.js_1033

Not applicable

37,152

26-Jul-2025

12:02

Sp.res.resx_1033

Not applicable

77,857

26-Jul-2025

12:02

Spadminlcid.rsx_1033

Not applicable

365,134

26-Jul-2025

12:02

Spcommon.css_1033

Not applicable

336,275

26-Jul-2025

12:02

Spcore.csst_1033

Not applicable

336,275

26-Jul-2025

12:02

Spmsg.dll_1033

16.0.5362.1000

254,440

26-Jul-2025

12:02

Spscore.rsx_1033

Not applicable

164,418

26-Jul-2025

12:02

Sshellui.mst_1033

Not applicable

14,336

28-Jul-2025

18:38

Starmstr.htm_1033

Not applicable

7,307

26-Jul-2025

12:02

Stsstrings.debug.js_1033

Not applicable

152,822

26-Jul-2025

12:02

Stsstrings.js_1033

Not applicable

148,257

26-Jul-2025

12:02

Sts_odbnextnewux214755de1ece2ff02432d18baa19d7f0_1033

Not applicable

1,478

26-Jul-2025

12:02

Sts_odbnextnewux35b2c59ce2384812d2e47a88fbe78c1a_1033

Not applicable

39,017

26-Jul-2025

12:02

Sts_odbnextnewux42314891a2273fd0124ed84702b37aee_1033

Not applicable

1,469

26-Jul-2025

12:02

Sts_odbnextnewux8eef75ff185c133fe53a7b51bb8c75fa_1033

Not applicable

12,782

26-Jul-2025

12:02

Sts_odbnextnewux91f569ad463283641e6c0d93a0d7d737_1033

Not applicable

1,035

26-Jul-2025

12:02

Sts_odbnextnewux9db951b10c2d4cf804ed06db1d0755d0_1033

Not applicable

438

26-Jul-2025

12:02

Sts_odbnextnewuxab9cb342b9b21d764dd058ee62bf2b65_1033

Not applicable

2,459

26-Jul-2025

12:02

Sts_odbnextnewuxb19f7d48addedf6e2fbbb201b531888a_1033

Not applicable

411

26-Jul-2025

12:02

Sts_odbnextnewuxbb795dfd227b65117982b923b0226467_1033

Not applicable

2,079

26-Jul-2025

12:02

Sts_odbnextnewuxbe23c18a2b71ad4d76c298fc94bacd6d_1033

Not applicable

1,088

26-Jul-2025

12:02

Sts_odbnextnewuxcdb3eb3231c4f7738a410f6149f948d1_1033

Not applicable

37,468

26-Jul-2025

12:02

Sts_odbnextnewuxcdd335066f361f18ff949f7f584270a9_1033

Not applicable

392

26-Jul-2025

12:02

Sts_odbnextnewuxcec50d532803e46e11009f875cb9752b_1033

Not applicable

14,571

26-Jul-2025

12:02

Sts_odbnextnewuxdc02b952813bc8c532698c2d245e632d_1033

Not applicable

312

26-Jul-2025

12:02

Sts_odbnextnewuxddf5081c6d86c08add9f46077e109494_1033

Not applicable

641

26-Jul-2025

12:02

Sts_odbnextnewuxe6837ec759351c731f822fedc3f53435_1033

Not applicable

248

26-Jul-2025

12:02

Tokyo.css_1033

Not applicable

342,576

26-Jul-2025

12:02

Tokyomb.css_1033

Not applicable

342,337

26-Jul-2025

12:02

Tpnfdocx_1033

Not applicable

21,913

26-Jul-2025

12:00

Translation.powershellhelp.xml.1033

Not applicable

83,657

26-Jul-2025

12:01

Txcmdhlp.xml_1033

Not applicable

192,450

26-Jul-2025

12:02

Upcmdhlp.xml_1033

Not applicable

273,237

26-Jul-2025

12:02

V14_biserver.intl.ewacommonintl.js.1033

Not applicable

19,632

26-Jul-2025

11:56

V15mast.htm_1033

Not applicable

29,762

26-Jul-2025

12:02

Wdsrv.conversion.word.wwintl.dll_1033

16.0.4936.1000

780,488

26-Jul-2025

11:56

Wdsrv.intlresources.dll.1033

16.0.5362.1000

79,296

26-Jul-2025

12:02

Wdsrv.powershellhelp.xml.1033

Not applicable

51,670

26-Jul-2025

12:01

Wefgallery_strings.js.1033

Not applicable

5,405

26-Jul-2025

11:56

Welsplas.htm_1033

Not applicable

5,567

26-Jul-2025

12:02

Wshellui.mst_1033

Not applicable

14,336

28-Jul-2025

18:38

Wsshelp.xml_1033

Not applicable

3,804,209

26-Jul-2025

12:00

Wsslcid.rsx_1033

Not applicable

738,526

26-Jul-2025

12:02

Wssmanifest.man_1033

Not applicable

849,847

26-Jul-2025

12:02

Xlmsmdsr.rll_1033

2011.110.9166.191

1,127,472

26-Jul-2025

11:56

_basicpg.htm_1033

Not applicable

176

26-Jul-2025

12:02

_wppage.htm_1033

Not applicable

179

26-Jul-2025

12:02

Information about protection and security

Protect yourself online: Windows Security support

Learn how we guard against cyber threats: Microsoft Security

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.