Applies ToSharePoint Server 2016

Summary

This security update resolves a Microsoft SharePoint remote code execution vulnerability, Microsoft SharePoint elevation of privilege vulnerability, and Microsoft SharePoint information disclosure vulnerability. To learn more about the vulnerabilities, see the following security advisories:

Notes: 

  • This is build 16.0.5478.1000 of the security update package.

  • To apply this security update, you must have the release version of Microsoft SharePoint Enterprise Server 2016 installed on the computer.

This public update delivers Feature Pack 2 for SharePoint Server 2016. Feature Pack 2 contains the following feature:

  • SharePoint Framework (SPFx)

This public update also delivers all the features that were included in Feature Pack 1 for SharePoint Server 2016, including the following:

  • Administrative Actions Logging

  • MinRole enhancements

  • SharePoint Custom Tiles

  • Hybrid Taxonomy.

  • OneDrive API for SharePoint on-premises

  • OneDrive for Business modern user experience (available to Software Assurance customers)

The OneDrive for Business modern user experience requires an active Software Assurance contract at the time that the experience is enabled, either by installation of the public update or by manual enablement. If you don't have an active Software Assurance contract at the time of enablement, you must turn off the OneDrive for Business modern user experience.

For more information, see the following Microsoft Docs articles:

Improvements and fixes

This security update adds a banner in Central Administration to notify customers about the end of support for Search Content Service (SCS)-based hybrid search.

Note: To get the improvement, you have to install KB 5002659 together with this update.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the standalone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More information

Security update deployment information

For deployment information about this update, see Deployments - Security Update Guide.

Security update replacement information

This security update replaces previously released security update 5002501.

File hash information

File name

SHA256 hash

wssloc2016-kb5002544-fullfile-x64-glb.exe

72391F5252CF97A98255F89686487B4FDB779F8F5BB91BEBFA6DBFA0B8912C91

File information

The global version of this update has the file attributes (or later file attributes) that are listed in the following table.

wss-x-none.msp file information

File name

File version

File size

Date

Time

Setup.exe

16.0.5475.1000

801,496

12-Nov-2024

04:14

Wsssetup.dll

16.0.5478.1000

13,296,248

12-Nov-2024

22:58

wssmui-en-us.msp file information

File name

File version

File size

Date

Time

Adodb.dll.deploy.forceupdate.1033

6.0.0.0

107,104

12-Nov-2024

22:57

Berlinmb.css_1033

Not applicable

342,337

12-Nov-2024

04:18

Conversion.msoserver.msointl30_win32.dll_1033

16.0.5408.1000

72,680

12-Nov-2024

04:12

Lyonmb.css_1033

Not applicable

342,337

12-Nov-2024

04:18

Mergejsstrings_js_1033

Not applicable

180,230

12-Nov-2024

04:18

Mergejsstringsd_js_1033

Not applicable

185,840

12-Nov-2024

04:18

Microsoft.sharepoint.client.runtime_1.dll.deploy.1033

16.0.4666.1000

305,392

12-Nov-2024

22:57

Microsoft.sharepoint.client_1.dll.deploy.1033

16.0.5478.1000

659,656

12-Nov-2024

22:57

Oslomb.css_1033

Not applicable

342,337

12-Nov-2024

04:18

Sp.jsgrid.res.js_1033

Not applicable

5,111

12-Nov-2024

04:18

Sp.res.js_1033

Not applicable

37,152

12-Nov-2024

04:18

Spcommon.css_1033

Not applicable

336,275

12-Nov-2024

04:18

Spcore.csst_1033

Not applicable

336,275

12-Nov-2024

04:18

Sts_odbnextnewux214755de1ece2ff02432d18baa19d7f0_1033

Not applicable

1,478

12-Nov-2024

04:18

Sts_odbnextnewux35b2c59ce2384812d2e47a88fbe78c1a_1033

Not applicable

39,017

12-Nov-2024

04:18

Sts_odbnextnewux42314891a2273fd0124ed84702b37aee_1033

Not applicable

1,469

12-Nov-2024

04:18

Sts_odbnextnewux8eef75ff185c133fe53a7b51bb8c75fa_1033

Not applicable

12,782

12-Nov-2024

04:18

Sts_odbnextnewux91f569ad463283641e6c0d93a0d7d737_1033

Not applicable

1,035

12-Nov-2024

04:18

Sts_odbnextnewux9db951b10c2d4cf804ed06db1d0755d0_1033

Not applicable

438

12-Nov-2024

04:18

Sts_odbnextnewuxab9cb342b9b21d764dd058ee62bf2b65_1033

Not applicable

2,459

12-Nov-2024

04:18

Sts_odbnextnewuxb19f7d48addedf6e2fbbb201b531888a_1033

Not applicable

411

12-Nov-2024

04:18

Sts_odbnextnewuxbb795dfd227b65117982b923b0226467_1033

Not applicable

2,079

12-Nov-2024

04:18

Sts_odbnextnewuxbe23c18a2b71ad4d76c298fc94bacd6d_1033

Not applicable

1,088

12-Nov-2024

04:18

Sts_odbnextnewuxcdb3eb3231c4f7738a410f6149f948d1_1033

Not applicable

37,468

12-Nov-2024

04:18

Sts_odbnextnewuxcdd335066f361f18ff949f7f584270a9_1033

Not applicable

392

12-Nov-2024

04:18

Sts_odbnextnewuxcec50d532803e46e11009f875cb9752b_1033

Not applicable

14,571

12-Nov-2024

04:18

Sts_odbnextnewuxdc02b952813bc8c532698c2d245e632d_1033

Not applicable

312

12-Nov-2024

04:18

Sts_odbnextnewuxddf5081c6d86c08add9f46077e109494_1033

Not applicable

641

12-Nov-2024

04:18

Sts_odbnextnewuxe6837ec759351c731f822fedc3f53435_1033

Not applicable

248

12-Nov-2024

04:18

Tokyomb.css_1033

Not applicable

342,337

12-Nov-2024

04:18

Tpnfdocx_1033

Not applicable

21,913

12-Nov-2024

04:16

V14_biserver.intl.ewacommonintl.js.1033

Not applicable

19,632

12-Nov-2024

04:12

Wefgallery_strings.js.1033

Not applicable

5,405

12-Nov-2024

04:12

Addgalleryimages.xap

Not applicable

76,852

12-Nov-2024

22:57

Adodb.dll.deploy

6.0.0.0

107,104

12-Nov-2024

22:57

Articleleft.html

Not applicable

6,235

12-Nov-2024

04:18

Articlelinks.html

Not applicable

4,831

12-Nov-2024

04:18

Articleright.html

Not applicable

5,314

12-Nov-2024

04:18

Berlin.css

Not applicable

342,057

12-Nov-2024

04:18

Catalogarticle.html

Not applicable

8,222

12-Nov-2024

04:18

Catalogwelcome.html

Not applicable

8,375

12-Nov-2024

04:18

Core.en-us.resx

Not applicable

501,178

12-Nov-2024

04:18

Corev15.css

Not applicable

338,141

12-Nov-2024

04:18

Corev15.css

Not applicable

338,141

12-Nov-2024

04:18

Corev15app.css

Not applicable

338,235

12-Nov-2024

04:18

Corev15app.css

Not applicable

338,235

12-Nov-2024

04:18

Dashboarddesigner.exe.deploy

16.0.5478.1000

974,560

12-Nov-2024

22:57

Dashboarddesigner.resources.dll.deploy

16.0.5478.1000

429,360

12-Nov-2024

22:57

Ddmanager.exe.deploy

16.0.5155.1000

305,424

12-Nov-2024

22:57

Ddmanager.intl.dll.deploy

16.0.4666.1000

36,584

12-Nov-2024

22:57

Ddmanager.intl.resources.dll.deploy

16.0.4666.1000

66,280

12-Nov-2024

22:57

Designer.application

Not applicable

17,951

12-Nov-2024

22:57

Designer.exe.manifest

Not applicable

32,723

12-Nov-2024

22:05

Discoverydownloadmanager.application

Not applicable

17,981

12-Nov-2024

22:57

Discoverydownloadmanager.exe.manifest

Not applicable

26,855

12-Nov-2024

22:05

Dlccore.en-us.resx

Not applicable

137,677

12-Nov-2024

13:43

Dsigres.cab

Not applicable

236,827

12-Nov-2024

22:57

Dsigres.cab

Not applicable

199,023

12-Nov-2024

22:57

Enterprisewiki.html

Not applicable

6,223

12-Nov-2024

04:18

Fpext.msg

Not applicable

171,130

12-Nov-2024

13:25

Interop.cdosys.dll.deploy

16.0.4666.1000

66,792

12-Nov-2024

22:57

Lyon.css

Not applicable

343,494

12-Nov-2024

04:18

Microsoft.office.access.server.resources.dll

16.0.5362.1000

79,776

12-Nov-2024

04:12

Microsoft.office.access.services.resources.dll

16.0.5362.1000

91,520

12-Nov-2024

04:12

Microsoft.office.client.policy.dll.deploy

16.0.4666.1000

29,912

12-Nov-2024

22:57

Microsoft.office.infopath.server.intl.resources.dll

16.0.5362.1000

202,640

12-Nov-2024

04:18

Microsoft.office.mhtexport.dll.deploy

16.0.4666.1000

35,024

12-Nov-2024

22:57

Microsoft.office.project.shared.intl.resources.dll

16.0.5161.1000

1,114,984

12-Nov-2024

13:43

Microsoft.office.word.server.intl.resources.dll

16.0.5362.1000

79,296

12-Nov-2024

04:18

Microsoft.performancepoint.common.calculation.dll.deploy

16.0.5478.1000

120,024

12-Nov-2024

22:57

Microsoft.performancepoint.common.calculation.resources.dll.deploy

16.0.5478.1000

34,552

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.client.dll.deploy

16.0.5478.1000

2,242,904

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.client.resources.dll.deploy

16.0.5478.1000

1,375,056

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.common.dll.deploy

16.0.5478.1000

73,504

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.common.resources.dll.deploy

16.0.5478.1000

26,904

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.designer.framework.dll.deploy

16.0.5478.1000

949,592

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.designer.framework.resources.dll.deploy

16.0.5478.1000

379,712

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.designerplugins.dll.deploy

16.0.5478.1000

6,181,664

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.designerplugins.resources.dll.deploy

16.0.5478.1000

3,919,104

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.designerworkspace.dll.deploy

16.0.5478.1000

396,512

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.designerworkspace.resources.dll.deploy

16.0.5478.1000

25,816

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.wizardframework.dll.deploy

16.0.5478.1000

127,776

12-Nov-2024

22:57

Microsoft.performancepoint.scorecards.wizardframework.resources.dll.deploy

16.0.5478.1000

59,136

12-Nov-2024

22:57

Microsoft.sharepoint.client.dll.deploy

16.0.5478.1000

659,656

12-Nov-2024

22:57

Microsoft.sharepoint.client.runtime.dll.deploy

16.0.4666.1000

305,392

12-Nov-2024

22:57

Microsoft.sharepoint.client.search.dll.deploy

16.0.4666.1000

83,688

12-Nov-2024

22:57

Microsoft.sharepoint.msg.dll

16.0.5362.1000

254,440

12-Nov-2024

04:18

Msmdsrvi_xl.rll

2011.110.9166.191

1,127,472

12-Nov-2024

04:12

Msoserverintl.dll

16.0.5430.1000

1,356,264

12-Nov-2024

04:11

Mssmsg.dll

16.0.4579.1000

201,472

12-Nov-2024

04:18

Mssmsg.dll

16.0.4579.1000

201,472

12-Nov-2024

04:18

Notessetup.exe

16.0.5452.1000

588,352

12-Nov-2024

04:18

Oslo.css

Not applicable

341,697

12-Nov-2024

04:18

Oslo.css

Not applicable

341,697

12-Nov-2024

04:18

Oslo.html

Not applicable

25,419

12-Nov-2024

04:18

Osloapp.css

Not applicable

338,235

12-Nov-2024

04:18

Osloapp.css

Not applicable

338,235

12-Nov-2024

04:18

Osrv.en-us.resx

Not applicable

8,762

12-Nov-2024

04:18

Osrvcore.en-us.resx

Not applicable

36,441

12-Nov-2024

04:18

Ppintl.dll

16.0.4954.1000

1,216,312

12-Nov-2024

04:11

Pwa.en-us.resx

Not applicable

806,067

12-Nov-2024

04:18

Seattle.html

Not applicable

29,762

12-Nov-2024

04:18

Sp.jsgrid.res.en-us.resx

Not applicable

16,415

12-Nov-2024

04:18

Sp.res.en-us.resx

Not applicable

77,857

12-Nov-2024

04:18

Spadmin.en-us.resx

Not applicable

364,469

12-Nov-2024

04:18

Spscore.en-us.resx

Not applicable

164,418

12-Nov-2024

04:18

Sshellui.mst

Not applicable

14,336

12-Nov-2024

22:57

Startermaster.html

Not applicable

7,307

12-Nov-2024

04:18

Sts_strings.debug.js

Not applicable

152,822

12-Nov-2024

04:18

Sts_strings.js

Not applicable

148,257

12-Nov-2024

04:18

Tokyo.css

Not applicable

342,576

12-Nov-2024

04:18

Welcomesplash.html

Not applicable

5,567

12-Nov-2024

04:18

Wshellui.mst

Not applicable

14,336

12-Nov-2024

22:57

Wss.en-us.resx

Not applicable

738,526

12-Nov-2024

04:18

Wssmanifest.man

Not applicable

849,847

12-Nov-2024

04:18

Wwintl.dll

16.0.4936.1000

780,488

12-Nov-2024

04:12

Xlsrvintl.dll

16.0.5446.1000

208,064

12-Nov-2024

13:31

Information about protection and security

Protect yourself online: Windows Security support

Learn how we guard against cyber threats: Microsoft Security

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.