KB5002708: Resolves a Microsoft SharePoint Server remote code execution vulnerability

Description of the security update for SharePoint Server 2019: May 13, 2025 (KB5002708)

Summary
This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint Server elevation of privilege vulnerability. To learn more about the vulnerabilities, see the following security advisories:

• Microsoft Common Vulnerabilities and Exposures CVE-2025-29976
• Microsoft Common Vulnerabilities and Exposures CVE-2025-30378
• Microsoft Common Vulnerabilities and Exposures CVE-2025-30382
• Microsoft Common Vulnerabilities and Exposures CVE-2025-30384

Notes:

• This is build 16.0.10417.20010 of the security update package.
• To apply this security update, you must have the release version of Microsoft SharePoint Server 2019 installed on the computer.