Patch tracker / Products / Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Enterprise Server 2016: vulnerabilities and security updates

Every CVE affecting Microsoft SharePoint Enterprise Server 2016 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
155
Updates (KBs)
124
Actively exploited (KEV)
9
Critical Severity
74

CVEs affecting Microsoft SharePoint Enterprise Server 2016

CVESeverityCVSSEPSSStatus
CVE-2025-53770Critical9.8100%KEVRansomware
CVE-2025-49704High8.8100%KEVRansomware
CVE-2025-49706High8.8100%KEVRansomware
CVE-2024-38094High7.553%KEVRansomware
CVE-2026-45659High8.89.1%KEVRansomware
CVE-2026-56164Critical9.877%KEV
CVE-2026-50522Critical9.877%KEV
CVE-2026-58644Critical9.835%KEV
CVE-2026-32201Medium6.525%KEV
CVE-2025-53771Critical9.8100%-
CVE-2025-49703High8.8100%-
CVE-2025-49701High8.8100%-
CVE-2026-54108Critical9.877%-
CVE-2026-55016Critical9.877%-
CVE-2026-55019Critical9.877%-
CVE-2026-55020Critical9.877%-
CVE-2026-55021Critical9.877%-
CVE-2026-55023Critical9.877%-
CVE-2026-55030Critical9.877%-
CVE-2026-55125Critical9.877%-
CVE-2026-55026Critical9.877%-
CVE-2026-55034Critical9.877%-
CVE-2026-55027Critical9.877%-
CVE-2026-55028Critical9.877%-
CVE-2026-55047Critical9.877%-
CVE-2026-55045Critical9.877%-
CVE-2026-55032Critical9.877%-
CVE-2026-55033Critical9.877%-
CVE-2026-55124Critical9.877%-
CVE-2026-55127Critical9.877%-
CVE-2026-55035Critical9.877%-
CVE-2026-55055Critical9.877%-
CVE-2026-55038Critical9.877%-
CVE-2026-55132Critical9.877%-
CVE-2026-55126Critical9.877%-
CVE-2026-55051Critical9.877%-
CVE-2026-55134Critical9.877%-
CVE-2026-55040Critical9.877%-
CVE-2026-55142Critical9.877%-
CVE-2026-55128Critical9.877%-
CVE-2026-55130Critical9.877%-
CVE-2026-55052Critical9.877%-
CVE-2026-55135Critical9.877%-
CVE-2026-56157Critical9.877%-
CVE-2026-56192Critical9.877%-
CVE-2026-55121Critical9.877%-
CVE-2026-62826Critical9.877%-
CVE-2026-55050Critical9.877%-
CVE-2026-58277Critical9.877%-
CVE-2024-38018High8.851%-
CVE-2024-43464High8.851%-
CVE-2024-38227High8.851%-
CVE-2024-38228High8.851%-
CVE-2024-43466High8.851%-
CVE-2024-38023High7.553%-
CVE-2024-38024High7.553%-
CVE-2024-32987High7.553%-
CVE-2026-45467Critical9.835%-
CVE-2026-45468Critical9.835%-
CVE-2026-45475Critical9.835%-
CVE-2026-45471Critical9.835%-
CVE-2026-45479Critical9.835%-
CVE-2026-45485Critical9.835%-
CVE-2026-45483Critical9.835%-
CVE-2026-44819Critical9.835%-
CVE-2026-44821Critical9.835%-
CVE-2026-44824Critical9.835%-
CVE-2026-45453Critical9.835%-
CVE-2026-45456Critical9.835%-
CVE-2026-45458Critical9.835%-
CVE-2026-47298Critical9.835%-
CVE-2026-47636Critical9.835%-
CVE-2026-47637Critical9.835%-
CVE-2026-47638Critical9.835%-
CVE-2026-47639Critical9.835%-
CVE-2026-47641Critical9.835%-
CVE-2026-33113Critical9.835%-
CVE-2026-45454Critical9.835%-
CVE-2026-45462Critical9.835%-
CVE-2026-45464Critical9.835%-
CVE-2026-45465Critical9.835%-
CVE-2026-47634Critical9.835%-
CVE-2026-47640Critical9.835%-
CVE-2026-45481Critical9.835%-
CVE-2026-45484Critical9.835%-
CVE-2026-48560Critical9.835%-
CVE-2026-48562Critical9.835%-
CVE-2026-20947Critical9.831%-
CVE-2026-20948Critical9.831%-
CVE-2025-21400High8.034%-
CVE-2025-27747High8.822%-
CVE-2025-29820High8.822%-
CVE-2025-29793High8.822%-
CVE-2025-29794High8.822%-
CVE-2025-26642High8.822%-
CVE-2025-54906High8.819%-
CVE-2025-54905High8.819%-
CVE-2025-54897High8.819%-
CVE-2025-53733High8.818%-
CVE-2025-53736High8.818%-
CVE-2025-53760High8.818%-
CVE-2025-49712High8.818%-
CVE-2026-20945Medium6.525%-
CVE-2025-47168High8.815%-
CVE-2025-47169High8.815%-
CVE-2025-47163High8.815%-
CVE-2025-47166High8.815%-
CVE-2025-47172High8.815%-
CVE-2026-35439High8.89.1%-
CVE-2026-40368High8.89.1%-
CVE-2026-33110High8.89.1%-
CVE-2026-33112High8.89.1%-
CVE-2026-40357High8.89.1%-
CVE-2026-40365High8.89.1%-
CVE-2026-40367High8.89.1%-
CVE-2026-47294High8.89.1%-
CVE-2026-26105High8.83.0%-
CVE-2026-26113High8.83.0%-
CVE-2026-26106High8.83.0%-
CVE-2026-26114High8.83.0%-
CVE-2025-59235High8.82.3%-
CVE-2025-59232High8.82.3%-
CVE-2025-59228High8.82.3%-
CVE-2025-59237High8.82.3%-
CVE-2025-59221High8.82.3%-
CVE-2025-59222High8.82.3%-
CVE-2024-49064High8.23.3%-
CVE-2024-49068High8.23.3%-
CVE-2024-49070High8.23.3%-
CVE-2024-49062High8.23.3%-
CVE-2024-49065High8.23.3%-
CVE-2025-54910High8.40.7%-
CVE-2025-62204High8.02.1%-
CVE-2025-53738High8.40.5%-
CVE-2026-45472High8.40.5%-
CVE-2026-45474High8.40.5%-
CVE-2026-45461High8.40.5%-
CVE-2026-45463High8.40.5%-
CVE-2026-21260High7.53.6%-
CVE-2026-21511High7.53.6%-
CVE-2025-29976High7.82.3%-
CVE-2025-30378High7.82.3%-
CVE-2025-30382High7.82.3%-
CVE-2025-30384High7.82.3%-
CVE-2025-21344High7.81.8%-
CVE-2025-21348High7.81.8%-
CVE-2025-21393High7.81.8%-
CVE-2024-43600High7.81.2%-
CVE-2025-29816High7.81.1%-
CVE-2025-62562High7.80.8%-
CVE-2025-62555High7.80.8%-
CVE-2025-62558High7.80.8%-
CVE-2025-62559High7.80.8%-
CVE-2024-43503High7.80.7%-
ADV240001High---

Updates (KBs) for Microsoft SharePoint Enterprise Server 2016

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50027532025-07-08Critical9.8100%2KEVRansomware
KB50027542025-07-08Critical9.8100%2KEVRansomware
KB50027592025-07-08Critical9.8100%2KEVRansomware
KB50027602025-07-08Critical9.8100%2KEVRansomware
KB50027682025-07-08Critical9.8100%2KEVRansomware
KB50027412025-07-08High8.8100%4KEVRansomware
KB50027442025-07-08High8.8100%4KEVRansomware
KB50027512025-07-08High8.8100%2KEVRansomware
KB50026062024-07-09High7.553%4KEVRansomware
KB50026152024-07-09High7.553%4KEVRansomware
KB50026182024-07-09High7.553%4KEVRansomware
KB50028632026-05-12High8.89.1%9KEVRansomware
KB50028682026-05-12High8.89.1%9KEVRansomware
KB50028702026-05-12High8.89.1%9KEVRansomware
KB50028822026-07-14Critical9.877%38KEV
KB50028832026-07-14Critical9.877%39KEV
KB50028912026-07-14Critical9.877%39KEV
KB50028732026-07-14Critical9.835%31KEV
KB50028742026-07-14Critical9.835%31KEV
KB50028802026-07-14Critical9.835%30KEV
KB50028532026-04-14Medium6.525%2KEV
KB50028542026-04-14Medium6.525%2KEV
KB50028612026-04-14Medium6.525%2KEV
KB50026242024-09-10High8.851%5-
KB50026392024-09-10High8.851%5-
KB50026402024-09-10High8.851%5-
KB50026782025-02-11High8.034%1-
KB50026812025-02-11High8.034%1-
KB50026852025-02-11High8.034%1-
KB50026912025-04-08High8.822%4-
KB50026922025-04-08High8.822%4-
KB50027052025-04-08High8.822%2-
KB50027752025-09-09High8.819%3-
KB50027782025-09-09High8.819%3-
KB50027842025-09-09High8.819%1-
KB50027692025-08-12High8.818%4-
KB50027712025-08-12High8.818%4-
KB50028232026-01-13High8.818%2-
KB50028272026-01-13High8.818%2-
KB50027292025-06-10High8.815%5-
KB50027322025-06-10High8.815%5-
KB50027362025-06-10High8.815%3-
KB50028562026-04-14Medium4.625%1-
KB50028622026-04-14Medium4.625%1-
KB50027732025-08-12High7.112%1-
KB50028452026-03-10High8.83.0%4-
KB50028502026-03-10High8.83.0%4-
KB50027862025-10-14High8.82.3%2-
KB50027882025-10-14High8.82.3%6-
KB50027962025-10-14High8.82.3%6-
KB50028432026-03-10High8.81.4%3-
KB50025442024-12-10High8.23.3%4-
KB50026572024-12-10High8.23.3%5-
KB50026582024-12-10High8.23.3%4-
KB50026592024-12-10High8.23.3%5-
KB50026642024-12-10High8.23.3%4-
KB50027812025-09-09High8.40.7%2-
KB50028852026-07-14High8.40.6%22-
KB50028922026-07-14High8.40.6%22-
KB50028002025-11-11High8.02.1%1-
KB50028032025-11-11High8.02.1%1-
KB50028052025-11-11High8.02.1%1-
KB50028472026-03-10High8.40.5%1-
KB50028482026-03-10High8.40.5%1-
KB50028512026-03-10High8.40.5%1-
KB50027632025-08-12High8.40.5%3-
KB50027702025-08-12High8.40.5%2-
KB50027722025-08-12High8.40.5%2-
KB50028762026-06-09High8.40.5%8-
KB50028782026-06-09High8.40.5%9-
KB50028792026-06-09High8.40.5%3-
KB50028812026-06-09High8.40.5%8-
KB50028692026-05-12High8.40.4%1-
KB50028722026-05-12High8.40.4%1-
KB50028332026-02-10High7.53.6%2-
KB50028342026-02-10High7.53.6%2-
KB50028362026-02-10High7.53.6%2-
KB50028392026-02-10High7.53.6%2-
KB50028402026-02-10High7.53.6%2-
KB50028412026-02-10High7.53.6%2-
KB50027082025-05-13High7.82.3%4-
KB50027092025-05-13High7.82.3%4-
KB50027222025-05-13High7.82.3%4-
KB50026662025-01-14High7.81.8%3-
KB50026672025-01-14High7.81.8%3-
KB50026712025-01-14High7.81.8%3-
KB50026722025-01-14High7.81.8%3-
KB50026762025-01-14High7.81.8%3-
KB50026612024-12-10High7.81.2%2-
KB50028022025-12-09High7.80.8%4-
KB50028042025-12-09High7.80.8%4-
KB50028062025-12-09High7.80.8%4-
KB50028162025-12-09High7.80.8%4-
KB50028212025-12-09High7.80.8%4-
KB50026822025-04-08High7.80.8%2-
KB50027022025-04-08High7.80.8%3-
KB50025762025-09-09High7.80.7%1-
KB50027662025-09-09High7.80.7%1-
KB50026452024-10-08High7.80.7%1-
KB50026472024-10-08High7.80.7%1-
KB50026492024-10-08High7.80.7%1-
KB50027102025-06-10High7.80.6%2-
KB50027272025-06-10High7.80.6%2-
KB50027312025-06-10High7.80.6%2-
KB50027062025-05-13High7.80.6%1-
KB50027122025-05-13High7.80.6%1-
KB50028902026-07-14High7.80.6%12-
KB50027392025-07-08High7.80.6%1-
KB50027432025-07-08High7.80.6%1-
KB50027452025-07-08High7.80.6%1-
KB50028292026-01-13High7.80.5%1-
KB50027872025-10-14High7.80.4%2-
KB50027892025-10-14High7.80.4%2-
KB50027982025-10-14High7.80.4%2-
KB50027742025-09-09High7.10.6%1-
KB50027772025-09-09High7.10.6%1-
KB50027802025-09-09High7.10.6%1-
KB50023412025-10-14High7.10.6%2-
KB50027192025-10-14High7.10.6%2-
KB50027202025-10-14High7.10.6%2-
KB50027572025-10-14High7.10.6%2-
KB50026502024-11-12High--1-
KB50026512024-11-12High--1-
KB50026542024-11-12High--1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5099540: the full CVE list KB5099538: patch details KB5094123: the full CVE list CVE-2026-50522 patch and risk KB5099539: patch details KB5101001 download and what it fixes CVE-2026-48282: severity and the patch CVE-2026-55255 patch and risk KB5101650: patch details CVE-2026-42897 patch and risk
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.