Patch tracker / Products / Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Enterprise Server 2016: vulnerabilities and security updates

Every CVE affecting Microsoft SharePoint Enterprise Server 2016 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
173
Updates (KBs)
46
Actively exploited (KEV)
12
Critical Severity
59

CVEs affecting Microsoft SharePoint Enterprise Server 2016

CVESeverityCVSSEPSSStatus
CVE-2025-53770Critical9.8100%KEVRansomware
CVE-2025-49704High8.8100%KEVRansomware
CVE-2025-49706Medium6.5100%KEVRansomware
CVE-2024-38094High7.553%KEVRansomware
CVE-2026-45659High8.82.7%KEVRansomware
CVE-2026-50522Critical9.870%KEV
CVE-2026-55040Critical9.170%KEV
CVE-2026-56164Medium5.370%KEV
CVE-2026-32201Medium6.543%KEV
CVE-2026-20963Critical9.830%KEV
CVE-2026-58644Critical9.816%KEV
CVE-2026-65660High8.82.1%KEV
CVE-2025-53771Critical9.8100%-
CVE-2025-49701High8.8100%-
CVE-2025-49703High7.8100%-
CVE-2026-54108Critical9.870%-
CVE-2026-55016Critical9.870%-
CVE-2026-55019Critical9.870%-
CVE-2026-55020Critical9.870%-
CVE-2026-55023Critical9.870%-
CVE-2026-55026Critical9.870%-
CVE-2026-55027Critical9.870%-
CVE-2026-55028Critical9.870%-
CVE-2026-55030Critical9.870%-
CVE-2026-55035Critical9.870%-
CVE-2026-55047Critical9.870%-
CVE-2026-55050Critical9.870%-
CVE-2026-55051Critical9.870%-
CVE-2026-55121Critical9.870%-
CVE-2026-55124Critical9.870%-
CVE-2026-55135Critical9.870%-
CVE-2026-55142Critical9.870%-
CVE-2026-56157Critical9.870%-
CVE-2026-56192Critical9.870%-
CVE-2026-62826Critical9.870%-
CVE-2026-55052High8.870%-
CVE-2026-58277High8.870%-
CVE-2026-55045High8.470%-
CVE-2026-55032High7.870%-
CVE-2026-55033High7.870%-
CVE-2026-55038High7.870%-
CVE-2026-55055High7.870%-
CVE-2026-55125High7.870%-
CVE-2026-55127High7.870%-
CVE-2026-55128High7.870%-
CVE-2026-55130High7.870%-
CVE-2026-55132High7.870%-
CVE-2026-55134High7.870%-
CVE-2026-55021High7.370%-
CVE-2026-55034High7.370%-
CVE-2026-55126High7.370%-
CVE-2024-38018High8.851%-
CVE-2024-43466High8.851%-
CVE-2024-32987High7.553%-
CVE-2024-38023High7.253%-
CVE-2024-38024High7.253%-
CVE-2024-43464High7.251%-
CVE-2024-38227High7.251%-
CVE-2024-38228High7.251%-
CVE-2026-20945Medium6.543%-
CVE-2026-20958Critical9.830%-
CVE-2026-20959Critical9.830%-
CVE-2025-21400High8.034%-
CVE-2026-20947High8.830%-
CVE-2026-20948High7.830%-
CVE-2026-20951High7.830%-
CVE-2025-29794High8.824%-
CVE-2026-20943High7.030%-
CVE-2025-47163High8.821%-
CVE-2025-47166High8.821%-
CVE-2025-47172High8.821%-
CVE-2025-27747High7.824%-
CVE-2025-29820High7.824%-
CVE-2026-33113Critical9.816%-
CVE-2026-44821Critical9.816%-
CVE-2026-45453Critical9.816%-
CVE-2026-45454Critical9.816%-
CVE-2026-45462Critical9.816%-
CVE-2026-45464Critical9.816%-
CVE-2026-45465Critical9.816%-
CVE-2026-45467Critical9.816%-
CVE-2026-45468Critical9.816%-
CVE-2026-45479Critical9.816%-
CVE-2026-45483Critical9.816%-
CVE-2026-45485Critical9.816%-
CVE-2026-47636Critical9.816%-
CVE-2026-47637Critical9.816%-
CVE-2026-47638Critical9.816%-
CVE-2026-47639Critical9.816%-
CVE-2026-47640Critical9.816%-
CVE-2026-47641Critical9.816%-
CVE-2026-48560Critical9.816%-
CVE-2026-48562Critical9.816%-
CVE-2025-54897High8.820%-
CVE-2025-49712High8.819%-
CVE-2025-53733High8.419%-
CVE-2025-29793High7.224%-
CVE-2025-47168High7.821%-
CVE-2025-47169High7.821%-
CVE-2026-45484High8.816%-
CVE-2025-54906High7.820%-
CVE-2026-45456High8.416%-
CVE-2026-45458High8.416%-
CVE-2025-54905High7.120%-
CVE-2026-47298High8.016%-
CVE-2025-53760High7.119%-
CVE-2026-44819High7.816%-
CVE-2026-44824High7.816%-
CVE-2026-45471High7.816%-
CVE-2026-45475High7.816%-
CVE-2025-53736Medium6.819%-
CVE-2026-45481High7.316%-
CVE-2026-58639Critical9.32.1%-
CVE-2026-62837Critical9.32.1%-
CVE-2026-62839Critical9.32.1%-
CVE-2026-62917Critical9.32.1%-
CVE-2026-63512Critical9.32.1%-
CVE-2026-63516Critical9.32.1%-
CVE-2026-64897Critical9.32.1%-
CVE-2026-64902Critical9.32.1%-
CVE-2026-64916Critical9.32.1%-
CVE-2026-64922Critical9.32.1%-
CVE-2026-70306Critical9.32.1%-
CVE-2026-33110High8.82.7%-
CVE-2026-33112High8.82.7%-
CVE-2026-35439High8.82.7%-
CVE-2026-40357High8.82.7%-
CVE-2026-40365High8.82.7%-
CVE-2025-59228High8.82.5%-
CVE-2025-59237High8.82.5%-
CVE-2026-26106High8.82.3%-
CVE-2026-26114High8.82.3%-
CVE-2026-62827High8.82.1%-
CVE-2026-63514High8.82.1%-
CVE-2026-64901High8.82.1%-
CVE-2026-64921High8.82.1%-
CVE-2026-65658High8.82.1%-
CVE-2026-65663High8.82.1%-
CVE-2026-66805High8.82.1%-
CVE-2026-66808High8.82.1%-
CVE-2026-70324High8.82.1%-
CVE-2026-40367High8.42.7%-
CVE-2024-49064High8.23.2%-
CVE-2024-49068High8.23.2%-
CVE-2024-49062High8.23.2%-
CVE-2024-49065High8.23.2%-
CVE-2026-26113High8.42.3%-
CVE-2026-40368High8.02.7%-
CVE-2026-47294High8.02.7%-
CVE-2026-26105High8.12.3%-
CVE-2026-63520High8.12.1%-
CVE-2025-62204High8.02.1%-
CVE-2026-21260High7.53.9%-
CVE-2026-21511High7.53.9%-
CVE-2025-29976High7.82.5%-
CVE-2025-30382High7.82.5%-
CVE-2025-59222High7.82.5%-
CVE-2025-21344High7.81.8%-
CVE-2025-21393High7.81.8%-
CVE-2024-49070High7.43.2%-
CVE-2025-30384High7.42.5%-
CVE-2025-62562High7.80.8%-
CVE-2025-62558High7.80.8%-
CVE-2025-62559High7.80.8%-
CVE-2024-43503High7.80.7%-
CVE-2026-64900High7.32.1%-
CVE-2025-59235High7.12.5%-
CVE-2025-59232High7.12.5%-
CVE-2025-21348High7.21.8%-
CVE-2025-30378High7.02.5%-
CVE-2025-59221High7.02.5%-
CVE-2025-62555High7.00.8%-
ADV240001High---

Updates (KBs) for Microsoft SharePoint Enterprise Server 2016

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50027592025-07-08Critical9.8100%2KEVRansomware
KB50027602025-07-08Critical9.8100%2KEVRansomware
KB50027442025-07-08High8.8100%4KEVRansomware
KB50026062024-07-09High7.553%4KEVRansomware
KB50026152024-07-09High7.553%4KEVRansomware
KB50026182024-07-09High7.553%4KEVRansomware
KB50028682026-05-12High8.82.7%9KEVRansomware
KB50028912026-07-14Critical9.870%39KEV
KB50028612026-04-14Medium6.543%2KEV
KB50028282026-01-13Critical9.830%7KEV
KB50028802026-07-14Critical9.816%30KEV
KB50029052026-08-11Critical9.32.1%23KEV
KB50029062026-08-11High8.82.1%22KEV
KB50026242024-09-10High8.851%5-
KB50026852025-02-11High8.034%1-
KB50026922025-04-08High8.824%4-
KB50027322025-06-10High8.821%5-
KB50027782025-09-09High8.820%3-
KB50027712025-08-12High8.819%4-
KB50028272026-01-13High8.819%2-
KB50028622026-04-14Medium4.619%1-
KB50027882025-10-14High8.82.5%6-
KB50028502026-03-10High8.82.3%4-
KB50025442024-12-10High8.23.2%4-
KB50026592024-12-10High8.23.2%5-
KB50028812026-06-09High8.40.6%8-
KB50028922026-07-14High8.40.6%22-
KB50028052025-11-11High8.02.1%1-
KB50027722025-08-12High8.40.5%2-
KB50028402026-02-10High7.53.9%2-
KB50028412026-02-10High7.53.9%2-
KB50028692026-05-12High8.40.4%1-
KB50028512026-03-10High8.40.4%1-
KB50027222025-05-13High7.82.5%4-
KB50026712025-01-14High7.81.8%3-
KB50026722025-01-14High7.81.8%3-
KB50026822025-04-08High7.80.8%2-
KB50028042025-12-09High7.80.8%4-
KB50028212025-12-09High7.80.8%4-
KB50027432025-07-08High7.80.7%1-
KB50026452024-10-08High7.80.7%1-
KB50027312025-06-10High7.80.7%2-
KB50027122025-05-13High7.80.6%1-
KB50027872025-10-14High7.80.5%2-
KB50027772025-09-09High7.10.6%1-
KB50026542024-11-12High--1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.