Patch tracker / Products / Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Enterprise Server 2016: vulnerabilities and security updates

Every CVE affecting Microsoft SharePoint Enterprise Server 2016 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
155
Updates (KBs)
124
Actively exploited (KEV)
9
Critical Severity
74

CVEs affecting Microsoft SharePoint Enterprise Server 2016

CVESeverityCVSSEPSSStatus
CVE-2025-53770Critical9.8100%KEVRansomware
CVE-2025-49704High8.8100%KEVRansomware
CVE-2025-49706High8.8100%KEVRansomware
CVE-2024-38094High7.553%KEVRansomware
CVE-2026-56164Critical9.876%KEV
CVE-2026-50522Critical9.876%KEV
CVE-2026-58644Critical9.835%KEV
CVE-2026-32201Medium6.525%KEV
CVE-2026-45659High8.89.1%KEV
CVE-2025-53771Critical9.8100%-
CVE-2025-49703High8.8100%-
CVE-2025-49701High8.8100%-
CVE-2026-54108Critical9.876%-
CVE-2026-55016Critical9.876%-
CVE-2026-55019Critical9.876%-
CVE-2026-55020Critical9.876%-
CVE-2026-55021Critical9.876%-
CVE-2026-55023Critical9.876%-
CVE-2026-55030Critical9.876%-
CVE-2026-55125Critical9.876%-
CVE-2026-55026Critical9.876%-
CVE-2026-55034Critical9.876%-
CVE-2026-55027Critical9.876%-
CVE-2026-55028Critical9.876%-
CVE-2026-55047Critical9.876%-
CVE-2026-55045Critical9.876%-
CVE-2026-55032Critical9.876%-
CVE-2026-55033Critical9.876%-
CVE-2026-55124Critical9.876%-
CVE-2026-55127Critical9.876%-
CVE-2026-55035Critical9.876%-
CVE-2026-55055Critical9.876%-
CVE-2026-55038Critical9.876%-
CVE-2026-55132Critical9.876%-
CVE-2026-55126Critical9.876%-
CVE-2026-55051Critical9.876%-
CVE-2026-55134Critical9.876%-
CVE-2026-55040Critical9.876%-
CVE-2026-55142Critical9.876%-
CVE-2026-55128Critical9.876%-
CVE-2026-55130Critical9.876%-
CVE-2026-55052Critical9.876%-
CVE-2026-55135Critical9.876%-
CVE-2026-56157Critical9.876%-
CVE-2026-56192Critical9.876%-
CVE-2026-55121Critical9.876%-
CVE-2026-62826Critical9.876%-
CVE-2026-55050Critical9.876%-
CVE-2026-58277Critical9.876%-
CVE-2024-38018High8.851%-
CVE-2024-43464High8.851%-
CVE-2024-38227High8.851%-
CVE-2024-38228High8.851%-
CVE-2024-43466High8.851%-
CVE-2024-38023High7.553%-
CVE-2024-38024High7.553%-
CVE-2024-32987High7.553%-
CVE-2026-45467Critical9.835%-
CVE-2026-45468Critical9.835%-
CVE-2026-45475Critical9.835%-
CVE-2026-45471Critical9.835%-
CVE-2026-45479Critical9.835%-
CVE-2026-45485Critical9.835%-
CVE-2026-45483Critical9.835%-
CVE-2026-44819Critical9.835%-
CVE-2026-44821Critical9.835%-
CVE-2026-44824Critical9.835%-
CVE-2026-45453Critical9.835%-
CVE-2026-45456Critical9.835%-
CVE-2026-45458Critical9.835%-
CVE-2026-47298Critical9.835%-
CVE-2026-47636Critical9.835%-
CVE-2026-47637Critical9.835%-
CVE-2026-47638Critical9.835%-
CVE-2026-47639Critical9.835%-
CVE-2026-47641Critical9.835%-
CVE-2026-33113Critical9.835%-
CVE-2026-45454Critical9.835%-
CVE-2026-45462Critical9.835%-
CVE-2026-45464Critical9.835%-
CVE-2026-45465Critical9.835%-
CVE-2026-47634Critical9.835%-
CVE-2026-47640Critical9.835%-
CVE-2026-45481Critical9.835%-
CVE-2026-45484Critical9.835%-
CVE-2026-48560Critical9.835%-
CVE-2026-48562Critical9.835%-
CVE-2026-20947Critical9.829%-
CVE-2026-20948Critical9.829%-
CVE-2025-21400High8.034%-
CVE-2025-27747High8.822%-
CVE-2025-29820High8.822%-
CVE-2025-29793High8.822%-
CVE-2025-29794High8.822%-
CVE-2025-26642High8.822%-
CVE-2025-53733High8.818%-
CVE-2025-53736High8.818%-
CVE-2025-53760High8.818%-
CVE-2025-49712High8.818%-
CVE-2025-54906High8.818%-
CVE-2025-54905High8.818%-
CVE-2025-54897High8.818%-
CVE-2026-20945Medium6.525%-
CVE-2025-47168High8.814%-
CVE-2025-47169High8.814%-
CVE-2025-47163High8.814%-
CVE-2025-47166High8.814%-
CVE-2025-47172High8.814%-
CVE-2026-35439High8.89.1%-
CVE-2026-40368High8.89.1%-
CVE-2026-33110High8.89.1%-
CVE-2026-33112High8.89.1%-
CVE-2026-40357High8.89.1%-
CVE-2026-40365High8.89.1%-
CVE-2026-40367High8.89.1%-
CVE-2026-47294High8.89.1%-
CVE-2026-26105High8.83.0%-
CVE-2026-26113High8.83.0%-
CVE-2026-26106High8.83.0%-
CVE-2026-26114High8.83.0%-
CVE-2025-59235High8.82.3%-
CVE-2025-59232High8.82.3%-
CVE-2025-59228High8.82.3%-
CVE-2025-59237High8.82.3%-
CVE-2025-59221High8.82.3%-
CVE-2025-59222High8.82.3%-
CVE-2024-49064High8.23.3%-
CVE-2024-49068High8.23.3%-
CVE-2024-49070High8.23.3%-
CVE-2024-49062High8.23.3%-
CVE-2024-49065High8.23.3%-
CVE-2025-54910High8.40.7%-
CVE-2025-53738High8.40.5%-
CVE-2025-62204High8.02.0%-
CVE-2026-45472High8.40.5%-
CVE-2026-45474High8.40.5%-
CVE-2026-45461High8.40.5%-
CVE-2026-45463High8.40.5%-
CVE-2026-21260High7.53.6%-
CVE-2026-21511High7.53.6%-
CVE-2025-29976High7.82.3%-
CVE-2025-30378High7.82.3%-
CVE-2025-30382High7.82.3%-
CVE-2025-30384High7.82.3%-
CVE-2025-21344High7.81.8%-
CVE-2025-21348High7.81.8%-
CVE-2025-21393High7.81.8%-
CVE-2024-43600High7.81.2%-
CVE-2025-29816High7.81.1%-
CVE-2025-62562High7.80.8%-
CVE-2025-62555High7.80.8%-
CVE-2025-62558High7.80.8%-
CVE-2025-62559High7.80.8%-
CVE-2024-43503High7.80.7%-
ADV240001High---

Updates (KBs) for Microsoft SharePoint Enterprise Server 2016

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50027532025-07-08Critical9.8100%2KEVRansomware
KB50027542025-07-08Critical9.8100%2KEVRansomware
KB50027592025-07-08Critical9.8100%2KEVRansomware
KB50027602025-07-08Critical9.8100%2KEVRansomware
KB50027682025-07-08Critical9.8100%2KEVRansomware
KB50027412025-07-08High8.8100%4KEVRansomware
KB50027442025-07-08High8.8100%4KEVRansomware
KB50027512025-07-08High8.8100%2KEVRansomware
KB50026062024-07-09High7.553%4KEVRansomware
KB50026152024-07-09High7.553%4KEVRansomware
KB50026182024-07-09High7.553%4KEVRansomware
KB50028822026-07-14Critical9.876%38KEV
KB50028832026-07-14Critical9.876%39KEV
KB50028912026-07-14Critical9.876%39KEV
KB50028732026-07-14Critical9.835%31KEV
KB50028742026-07-14Critical9.835%31KEV
KB50028802026-07-14Critical9.835%30KEV
KB50028532026-04-14Medium6.525%2KEV
KB50028542026-04-14Medium6.525%2KEV
KB50028612026-04-14Medium6.525%2KEV
KB50028632026-05-12High8.89.1%9KEV
KB50028682026-05-12High8.89.1%9KEV
KB50028702026-05-12High8.89.1%9KEV
KB50026242024-09-10High8.851%5-
KB50026392024-09-10High8.851%5-
KB50026402024-09-10High8.851%5-
KB50026782025-02-11High8.034%1-
KB50026812025-02-11High8.034%1-
KB50026852025-02-11High8.034%1-
KB50026912025-04-08High8.822%4-
KB50026922025-04-08High8.822%4-
KB50027052025-04-08High8.822%2-
KB50027692025-08-12High8.818%4-
KB50027712025-08-12High8.818%4-
KB50027752025-09-09High8.818%3-
KB50027782025-09-09High8.818%3-
KB50027842025-09-09High8.818%1-
KB50028232026-01-13High8.818%2-
KB50028272026-01-13High8.818%2-
KB50027292025-06-10High8.814%5-
KB50027322025-06-10High8.814%5-
KB50027362025-06-10High8.814%3-
KB50028562026-04-14Medium4.625%1-
KB50028622026-04-14Medium4.625%1-
KB50027732025-08-12High7.112%1-
KB50028452026-03-10High8.83.0%4-
KB50028502026-03-10High8.83.0%4-
KB50027862025-10-14High8.82.3%2-
KB50027882025-10-14High8.82.3%6-
KB50027962025-10-14High8.82.3%6-
KB50028432026-03-10High8.81.4%3-
KB50025442024-12-10High8.23.3%4-
KB50026572024-12-10High8.23.3%5-
KB50026582024-12-10High8.23.3%4-
KB50026592024-12-10High8.23.3%5-
KB50026642024-12-10High8.23.3%4-
KB50027812025-09-09High8.40.7%2-
KB50028852026-07-14High8.40.6%22-
KB50028922026-07-14High8.40.6%22-
KB50028472026-03-10High8.40.5%1-
KB50028482026-03-10High8.40.5%1-
KB50028512026-03-10High8.40.5%1-
KB50027632025-08-12High8.40.5%3-
KB50028002025-11-11High8.02.0%1-
KB50028032025-11-11High8.02.0%1-
KB50028052025-11-11High8.02.0%1-
KB50027702025-08-12High8.40.5%2-
KB50027722025-08-12High8.40.5%2-
KB50028762026-06-09High8.40.5%8-
KB50028782026-06-09High8.40.5%9-
KB50028812026-06-09High8.40.5%8-
KB50028692026-05-12High8.40.5%1-
KB50028722026-05-12High8.40.5%1-
KB50028792026-06-09High8.40.5%3-
KB50028332026-02-10High7.53.6%2-
KB50028342026-02-10High7.53.6%2-
KB50028362026-02-10High7.53.6%2-
KB50028392026-02-10High7.53.6%2-
KB50028402026-02-10High7.53.6%2-
KB50028412026-02-10High7.53.6%2-
KB50027082025-05-13High7.82.3%4-
KB50027092025-05-13High7.82.3%4-
KB50027222025-05-13High7.82.3%4-
KB50026662025-01-14High7.81.8%3-
KB50026672025-01-14High7.81.8%3-
KB50026712025-01-14High7.81.8%3-
KB50026722025-01-14High7.81.8%3-
KB50026762025-01-14High7.81.8%3-
KB50026612024-12-10High7.81.2%2-
KB50028022025-12-09High7.80.8%4-
KB50028042025-12-09High7.80.8%4-
KB50028062025-12-09High7.80.8%4-
KB50028162025-12-09High7.80.8%4-
KB50028212025-12-09High7.80.8%4-
KB50026822025-04-08High7.80.8%2-
KB50027022025-04-08High7.80.8%3-
KB50025762025-09-09High7.80.7%1-
KB50027662025-09-09High7.80.7%1-
KB50026452024-10-08High7.80.7%1-
KB50026472024-10-08High7.80.7%1-
KB50026492024-10-08High7.80.7%1-
KB50027102025-06-10High7.80.6%2-
KB50027272025-06-10High7.80.6%2-
KB50027312025-06-10High7.80.6%2-
KB50027062025-05-13High7.80.6%1-
KB50027122025-05-13High7.80.6%1-
KB50028902026-07-14High7.80.6%12-
KB50027392025-07-08High7.80.6%1-
KB50027432025-07-08High7.80.6%1-
KB50027452025-07-08High7.80.6%1-
KB50028292026-01-13High7.80.5%1-
KB50027872025-10-14High7.80.4%2-
KB50027892025-10-14High7.80.4%2-
KB50027982025-10-14High7.80.4%2-
KB50023412025-10-14High7.10.6%2-
KB50027192025-10-14High7.10.6%2-
KB50027202025-10-14High7.10.6%2-
KB50027572025-10-14High7.10.6%2-
KB50027742025-09-09High7.10.6%1-
KB50027772025-09-09High7.10.6%1-
KB50027802025-09-09High7.10.6%1-
KB50026502024-11-12High--1-
KB50026512024-11-12High--1-
KB50026542024-11-12High--1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Data notice: this page, the feeds, and the API are provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative vendor advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.