KB5002736: Provides a setting to hide the command bar in the List web part.
SharePoint Server Subscription Edition (SE)Microsoft
Description of the security update for SharePoint Server Subscription Edition: June 10, 2025 (KB5002736)
Summary
This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2025-47163
- Microsoft Common Vulnerabilities and Exposures CVE-2025-47166
- Microsoft Common Vulnerabilities and Exposures CVE-2025-47172
Improvements and fixes
This security update contains improvements and fixes for the following nonsecurity issues in SharePoint Server Subscription Edition:
- Provides a setting to hide the command bar in the List web part.
- To Support the GraphEndpointHost configuration, please download the latest version of Onboard-CloudHybridSearch-SPOONS.ps1 script to try this update.
- Requires customers to use the new hybrid search endpoint.
- Fixes an issue in which you receive the following error message when you load the search schema from the SharePoint Central Administration page:
- Fixes an issue in which you receive the following error message when you try to call EndExecuteNonQuery multiple times in asynchronous SQL session:
- Fixes an issue in which the Attachments Boolean property is no longer returned when calling the SharePoint Lists REST API.
- Fixes an issue in which the spinning circle on the Share Site dialog doesn't disappear when you share a site from the homepage.
- Fixes an encoding issue that causes mojibake when you download folders containing Traditional Chinese characters.
- Fixes the SQL connection string compatibility issue between System.Data.SqlClient and Microsoft.Data.SqlClient.
- Fixes an issue in which the text web part doesn't display bold text after the Microsoft Edge 135 update.
- Fixes an issue in which the Distributed Cache service doesn't start after slipstream installations.
- Fixes an issue in which the search box is misaligned on communication sites.
