Summary
This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerabilities, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2025-21344
- Microsoft Common Vulnerabilities and Exposures CVE-2025-21348
- Microsoft Common Vulnerabilities and Exposures CVE-2025-21393
Note
- This is build 16.0.5483.1001 of the security update package.
- To apply this security update, you must have the release version of Microsoft SharePoint Enterprise Server 2016 installed on the computer.
This public update delivers Feature Pack 2 for SharePoint Server 2016. Feature Pack 2 contains the following feature:
- SharePoint Framework (SPFx)
This public update also delivers all the features that were included in Feature Pack 1 for SharePoint Server 2016, including the following:
- Administrative Actions Logging
- MinRole enhancements
- SharePoint Custom Tiles
- Hybrid Taxonomy.
- OneDrive API for SharePoint on-premises
- OneDrive for Business modern user experience (available to Software Assurance customers)
The OneDrive for Business modern user experience requires an active Software Assurance contract at the time that the experience is enabled, either by installation of the public update or by manual enablement. If you don't have an active Software Assurance contract at the time of enablement, you must turn off the OneDrive for Business modern user experience.
For more information, see the following Microsoft Docs articles:
- New features included in the November 2016 Public Update for SharePoint Server 2016 (Feature Pack 1)
- New features included in the September 2017 Public Update for SharePoint Server 2016 (Feature Pack 2)
How to get and install the update
Method 1: Microsoft Update
This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.
Method 2: Microsoft Update Catalog
To get the standalone package for this update, go to the Microsoft Update Catalog website.
Method 3: Microsoft Download Center
You can get the standalone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.
More information
Security update deployment information
For deployment information about this update, see Deployments - Security Update Guide.
Security update replacement information
This security update replaces previously released security update 5002544.
File hash information
| File name | SHA256 hash |
|---|---|
| wssloc2016-kb5002671-fullfile-x64-glb.exe | 94E1DCD27E638FEBDBE88F315B876510248432DE7AAE51874509DA5A127FEADF |
File information
The global version of this update has the file attributes (or later file attributes) that are listed in the following table.
x64
| wss-x-none.msp file information |
|---|
| File nameFile versionFile sizeDateTimeSvrsetup.exe16.0.5482.1000801,48821-Dec-202417:07Wsssetup.dll16.0.5483.100113,296,28022-Dec-202420:50 |
| wssmui-en-us.msp file information |
|---|
| File nameFile versionFile sizeDateTimeAccessserver.resources.dll.103316.0.5362.100079,77621-Dec-202417:05Accessservices.resources.dll.103316.0.5362.100091,52021-Dec-202417:05Addgalim.xap_1033Not Applicable76,83922-Dec-202420:50Adodb.dll.deploy.10336.0.0.0107,10422-Dec-202420:50Adodb.dll.deploy.forceupdate.10336.0.0.0107,10422-Dec-202420:50Artleft.htm_1033Not Applicable6,23521-Dec-202417:10Artlink.htm_1033Not Applicable4,83121-Dec-202417:10Artright.htm_1033Not Applicable5,31421-Dec-202417:10Avreport.htm_1033Not Applicable8,62421-Dec-202417:10Berinc.css_1033Not Applicable342,05721-Dec-202417:10Berlinmb.css_1033Not Applicable342,33721-Dec-202417:10Btmast.htm_1033Not Applicable25,41921-Dec-202417:10Catart.htm_1033Not Applicable8,22221-Dec-202417:10Catwelco.htm_1033Not Applicable8,37521-Dec-202417:10Conversion.excel.xlsrvintl.dll_103316.0.5446.1000208,06422-Dec-202412:45Conversion.msoserver.msointl30_win32.dll_103316.0.5408.100072,68021-Dec-202417:05Conversion.msoserver.msoserverintl.dll_103316.0.5430.10001,356,26421-Dec-202417:04Core.rsx_1033Not Applicable501,17821-Dec-202417:10Corev15.csst_1033Not Applicable338,14121-Dec-202417:10Corev15.css_1033Not Applicable338,14121-Dec-202417:10Corev15a.csst_1033Not Applicable338,23521-Dec-202417:10Corev15a.css_1033Not Applicable338,23521-Dec-202417:10Crosoft.performancepoint.scorecards.designerplugins.dll.deploy.103316.0.5483.10016,181,65622-Dec-202420:50Crosoft.performancepoint.scorecards.wizardframework.dll.deploy.103316.0.5483.1001127,76822-Dec-202420:50Dashboarddesigner.exe.deploy.103316.0.5483.1001974,61622-Dec-202420:50Dashboarddesigner.resources.dll.deploy.103316.0.5483.1001429,38422-Dec-202420:50Ddmanager.exe.deploy.103316.0.5155.1000305,42422-Dec-202420:50Ddmanager.intl.dll.deploy.103316.0.4666.100036,58422-Dec-202420:50Ddmanager.intl.resources.dll.deploy.103316.0.4666.100066,28022-Dec-202420:50Designer.application.1033Not Applicable17,89922-Dec-202420:50Designer.exe.manifest.1033Not Applicable32,68722-Dec-202419:59Discoverydownloadmanager.application.1033Not Applicable17,96522-Dec-202420:50Discoverydownloadmanager.exe.manifest.1033Not Applicable26,83122-Dec-202419:59Dlccore_llcc.resx_1033Not Applicable137,67722-Dec-202412:56Dsigres.cab.x64.1033Not Applicable236,80322-Dec-202420:50Dsigres.cab.x86.1033Not Applicable199,01122-Dec-202420:50Entwiki.htm_1033Not Applicable6,22321-Dec-202417:10Error.htm_1033Not Applicable5,96221-Dec-202417:10Errorv4.htm_1033Not Applicable3,21721-Dec-202417:10Filedlg.htm_0011_1033Not Applicable5,90221-Dec-202417:10Fontdlg.htm_1033Not Applicable3,12321-Dec-202417:10Fpext.msg_1033Not Applicable171,13022-Dec-202412:39Iframe.htm_1033Not Applicable39621-Dec-202417:10Iframe.htm_14_1033Not Applicable39821-Dec-202417:10Ifsintl.dll.103316.0.5362.1000202,64021-Dec-202417:10Instable.htm_1033Not Applicable4,16921-Dec-202417:10Interop.cdosys.dll.deploy.103316.0.4666.100066,79222-Dec-202420:50Ipfshelp.xml.1033Not Applicable209,84721-Dec-202417:09Irmrept.htm_1033Not Applicable9,26521-Dec-202417:10Lyoninc.css_1033Not Applicable343,49421-Dec-202417:10Lyonmb.css_1033Not Applicable342,33721-Dec-202417:10Mergejsstringsd_js_1033Not Applicable185,84021-Dec-202417:10Mergejsstrings_js_1033Not Applicable180,23021-Dec-202417:10Microsoft.office.client.policy.dll.deploy.103316.0.4666.100029,91222-Dec-202420:50Microsoft.office.mhtexport.dll.deploy.103316.0.4666.100035,02422-Dec-202420:50Microsoft.office.project.shared.intl.loc.dll.103316.0.5161.10001,114,98422-Dec-202412:56Microsoft.office.server.powerpoint.dllhelp.xml_1033Not Applicable27,97021-Dec-202417:09Microsoft.office.visio.server.dll_help.xml.1033Not Applicable101,79921-Dec-202417:09Microsoft.performancepoint.scorecards.client.dll.deploy.103316.0.5483.10012,242,89622-Dec-202420:50Microsoft.performancepoint.scorecards.common.dll.deploy.103316.0.5483.100173,52822-Dec-202420:50Microsoft.sharepoint.client.dll.deploy.103316.0.5483.1000659,68022-Dec-202420:50Microsoft.sharepoint.client.runtime.dll.deploy.103316.0.4666.1000305,39222-Dec-202420:50Microsoft.sharepoint.client.runtime_1.dll.deploy.103316.0.4666.1000305,39222-Dec-202420:50Microsoft.sharepoint.client.search.dll.deploy.103316.0.4666.100083,68822-Dec-202420:50Microsoft.sharepoint.client_1.dll.deploy.103316.0.5483.1000659,68022-Dec-202420:50Moss.ecm.dll_help.xml_1033Not Applicable134,27521-Dec-202417:10Mssmsg.dll.103316.0.4579.1000201,47221-Dec-202417:10Mssmsg.dll_0001.103316.0.4579.1000201,47221-Dec-202417:10Notesstp.exe.oss.103316.0.5452.1000588,35221-Dec-202417:10Oslo.csst_1033Not Applicable341,69721-Dec-202417:10Oslo.css_1033Not Applicable341,69721-Dec-202417:10Osloapp.csst_1033Not Applicable338,23521-Dec-202417:10Osloapp.css_1033Not Applicable338,23521-Dec-202417:10Oslomb.css_1033Not Applicable342,33721-Dec-202417:10Osoft.performancepoint.scorecards.designerworkspace.dll.deploy.103316.0.5483.1001396,53622-Dec-202420:50Osrv.rsx_1033Not Applicable8,76221-Dec-202417:10Osrvcmdh.xml_1033Not Applicable157,12721-Dec-202417:09Osrvcore.rsx_1033Not Applicable36,44121-Dec-202417:10Oss.search.powershell.help.xml_1033Not Applicable1,452,29821-Dec-202417:09Ppsma.dll_help.xml_1033Not Applicable171,72321-Dec-202417:10Ppt.conversion.ppintl.dll_103316.0.4954.10001,216,31221-Dec-202417:04Prjsvr.cmdlethelp.xml.1033Not Applicable259,50921-Dec-202417:09Pwa.lcid.resx.1033Not Applicable806,06721-Dec-202417:10Reviewpublishing_feature.xml_1033Not Applicable1,15522-Dec-202412:56Reviewspd_feature.xml_1033Not Applicable1,23722-Dec-202412:56Rformancepoint.scorecards.designerplugins.resources.dll.deploy.103316.0.5483.10013,919,10422-Dec-202420:50Rformancepoint.scorecards.wizardframework.resources.dll.deploy.103316.0.5483.100159,16822-Dec-202420:50Rgnlstng.xml_1033Not Applicable26,64821-Dec-202417:10Rmancepoint.scorecards.designer.framework.resources.dll.deploy.103316.0.5483.1001379,68822-Dec-202420:50Rmancepoint.scorecards.designer.workspace.resources.dll.deploy.103316.0.5483.100125,85622-Dec-202420:50Rosoft.performancepoint.common.calculation.resources.dll.deploy.103316.0.5483.100134,57622-Dec-202420:50Rosoft.performancepoint.scorecards.client.resources.dll.deploy.103316.0.5483.10011,375,03222-Dec-202420:50Rosoft.performancepoint.scorecards.common.resources.dll.deploy.103316.0.5483.100126,95222-Dec-202420:50Selcolor.htm_1033Not Applicable12,16521-Dec-202417:10Signaturesspd_feature.xml_1033Not Applicable1,17322-Dec-202412:56Soft.performancepoint.common.calculation.dll.deploy.103316.0.5483.1001120,07222-Dec-202420:50Soft.performancepoint.scorecards.designer.framework.dll.deploy.103316.0.5483.1001949,53622-Dec-202420:50Sp.jsgrid.res.js_1033Not Applicable5,11121-Dec-202417:10Sp.jsgrid.res.resx_1033Not Applicable16,41521-Dec-202417:10Sp.res.js_1033Not Applicable37,15221-Dec-202417:10Sp.res.resx_1033Not Applicable77,85721-Dec-202417:10Spadminlcid.rsx_1033Not Applicable364,46921-Dec-202417:10Spcommon.css_1033Not Applicable336,27521-Dec-202417:10Spcore.csst_1033Not Applicable336,27521-Dec-202417:10Spmsg.dll_103316.0.5362.1000254,44021-Dec-202417:10Spscore.rsx_1033Not Applicable164,41821-Dec-202417:10Sshellui.mst_1033Not Applicable14,33622-Dec-202420:50Starmstr.htm_1033Not Applicable7,30721-Dec-202417:10Stsstrings.debug.js_1033Not Applicable152,82221-Dec-202417:10Stsstrings.js_1033Not Applicable148,25721-Dec-202417:10Sts_odbnextnewux214755de1ece2ff02432d18baa19d7f0_1033Not Applicable1,47821-Dec-202417:10Sts_odbnextnewux35b2c59ce2384812d2e47a88fbe78c1a_1033Not Applicable39,01721-Dec-202417:10Sts_odbnextnewux42314891a2273fd0124ed84702b37aee_1033Not Applicable1,46921-Dec-202417:10Sts_odbnextnewux8eef75ff185c133fe53a7b51bb8c75fa_1033Not Applicable12,78221-Dec-202417:10Sts_odbnextnewux91f569ad463283641e6c0d93a0d7d737_1033Not Applicable1,03521-Dec-202417:10Sts_odbnextnewux9db951b10c2d4cf804ed06db1d0755d0_1033Not Applicable43821-Dec-202417:10Sts_odbnextnewuxab9cb342b9b21d764dd058ee62bf2b65_1033Not Applicable2,45921-Dec-202417:10Sts_odbnextnewuxb19f7d48addedf6e2fbbb201b531888a_1033Not Applicable41121-Dec-202417:10Sts_odbnextnewuxbb795dfd227b65117982b923b0226467_1033Not Applicable2,07921-Dec-202417:10Sts_odbnextnewuxbe23c18a2b71ad4d76c298fc94bacd6d_1033Not Applicable1,08821-Dec-202417:10Sts_odbnextnewuxcdb3eb3231c4f7738a410f6149f948d1_1033Not Applicable37,46821-Dec-202417:10Sts_odbnextnewuxcdd335066f361f18ff949f7f584270a9_1033Not Applicable39221-Dec-202417:10Sts_odbnextnewuxcec50d532803e46e11009f875cb9752b_1033Not Applicable14,57121-Dec-202417:10Sts_odbnextnewuxdc02b952813bc8c532698c2d245e632d_1033Not Applicable31221-Dec-202417:10Sts_odbnextnewuxddf5081c6d86c08add9f46077e109494_1033Not Applicable64121-Dec-202417:10Sts_odbnextnewuxe6837ec759351c731f822fedc3f53435_1033Not Applicable24821-Dec-202417:10Tokyo.css_1033Not Applicable342,57621-Dec-202417:10Tokyomb.css_1033Not Applicable342,33721-Dec-202417:10Tpnfdocx_1033Not Applicable21,91321-Dec-202417:09Translation.powershellhelp.xml.1033Not Applicable83,65721-Dec-202417:09Txcmdhlp.xml_1033Not Applicable192,45021-Dec-202417:10Upcmdhlp.xml_1033Not Applicable273,23721-Dec-202417:10V14_biserver.intl.ewacommonintl.js.1033Not Applicable19,63221-Dec-202417:05V15mast.htm_1033Not Applicable29,76221-Dec-202417:10Wdsrv.conversion.word.wwintl.dll_103316.0.4936.1000780,48821-Dec-202417:04Wdsrv.intlresources.dll.103316.0.5362.100079,29621-Dec-202417:10Wdsrv.powershellhelp.xml.1033Not Applicable51,67021-Dec-202417:09Wefgallery_strings.js.1033Not Applicable5,40521-Dec-202417:05Welsplas.htm_1033Not Applicable5,56721-Dec-202417:10Wshellui.mst_1033Not Applicable14,33622-Dec-202420:50Wsshelp.xml_1033Not Applicable3,804,20921-Dec-202417:09Wsslcid.rsx_1033Not Applicable738,52621-Dec-202417:10Wssmanifest.man_1033Not Applicable849,84721-Dec-202417:10Xlmsmdsr.rll_10332011.110.9166.1911,127,47221-Dec-202417:05_basicpg.htm_1033Not Applicable17621-Dec-202417:10_wppage.htm_1033Not Applicable17921-Dec-202417:10 |
Information about protection and security
Protect yourself online: Windows Security support
Learn how we guard against cyber threats: Microsoft Security