Below are the security fixes for the SharePoint OnPrem versions released this month.
SharePoint Server 2016:
- KB 5002722 – SharePoint Server 2016 (language independent)
- KB 5002712 – SharePoint Server 2016 (language dependent)
Microsoft Support recommends to install the complete May 2025 CU for SharePoint 2016 rather than individual security fixes.
SharePoint Server 2019:
- KB 5002708 – SharePoint Server 2019 (language independent)
- KB 5002706 – SharePoint Server 2019 (language dependent)
Microsoft Support recommends to install the complete May 2025 CU for SharePoint 2019 rather than individual security fixes.
SharePoint Server Subscription Edition:
- KB 5002709 – SharePoint Server Subscription Edition
This security fix is identical with May 2025 CU for SharePoint Server Subscription Edition.
Office Online Server:
- KB 5002707 – Office Online Server
More information:
Please ensure to have a look at the SharePoint Patching Best Practices before applying new fixes.
Security Vulnerabilities fixed in this PU
Vulnerability | SP 2016 | SP 2019 | SP SE | OOS | Impact | Max Severity |
---|---|---|---|---|---|---|
CVE-2025-29976 | x | x | x | Elevation of Privilege | Important | |
CVE-2025-29977 | x | Remote Code Execution | Important | |||
CVE-2025-29979 | x | Remote Code Execution | Important | |||
CVE-2025-30375 | x | Remote Code Execution | Important | |||
CVE-2025-30376 | x | Remote Code Execution | Important | |||
CVE-2025-30378 | x | x | x | Remote Code Execution | Important | |
CVE-2025-30379 | x | Remote Code Execution | Important | |||
CVE-2025-30381 | x | Remote Code Execution | Important | |||
CVE-2025-30382 | x | x | x | Remote Code Execution | Important | |
CVE-2025-30383 | x | Remote Code Execution | Important | |||
CVE-2025-30384 | x | x | x | Remote Code Execution | Important |
See the Security Update Guide below for more details about the relevant fixes:
Permalink
We have a problem with update “KB5002712″.
The install fails on all of our servers with this error message:
(Dutch):
Product: Microsoft SharePoint Foundation 2016 1043 Lang Pack — Fout 1937. Er is een fout opgetreden tijdens de installatie van het onderdeel microsoft.sharepoint.portal.intl.resources,fileVersion=”16.0.5491.1000″,version=”16.0.0.0000000″,culture=”nl”,publicKeyToken=”71E9BCE111E9429C”,processorArchitecture=”MSIL”. De handtekening of catalogus kan niet worden gecontroleerd of is ongeldig. HRESULT: 0x80131045. onderdeelinterface: IAssemblyCacheItem, functie: Commit, naam van onderdeel: {A3B1B428-EF23-4E91-A1F7-136206C38EA5}
Translated to English:
Product: Microsoft SharePoint Foundation 2016 1043 Lang Pack — Error 1937. An error occurred during installation of the component microsoft.sharepoint.portal.intl.resources,fileVersion=”16.0. 5491.1000″,version=”16.0.0.0000000″,culture=”nl”,publicKeyToken=”71E9BCE111E9429C”,processorArchitecture=”MSIL”. The signature or catalog could not be verified or is invalid. HRESULT: 0x80131045. component interface: IAssemblyCacheItem, function: Commit, component name: {A3B1B428-EF23-4E91-A1F7-136206C38EA5}
Languagepack 1043 is the languagepack for Dutch (Netherlands).
Is this a know issue? It says it cannot verify the signature. Last month there was also an update with this kind of problems where a file could not be verified as it was signed with a wrong certificate.
Permalink
Hi Maarten,
I have been able to reproduce the issue on my machine.
Can you please open a support case with Microsoft and send me the SR number using the “Contact the Blog Author” option at the top of this page to allow me to follow up?
Thanks,
Stefan
Permalink
Hoi Maarten
Did you get any fix from MS? I have the same issue.
Thanks
Permalink
Hi Mounir,
the issue will be fixed in a future CU – currently planned for July 2025 CU.
Cheers,
Stefan
Permalink
Hi Stefan,
Oh ok, thank you.
Cheers
Mounir
Permalink
Does this only affect Dutch versions or is it universal.?
Should we skip May?
Permalink
Hi Tony,
it only affects Dutch and Portuguese (Brazil) language packs.
Cheers,
Stefan