KB5002853: This update fixes an issue in which the default Office options don't appear after
Description of the security update for SharePoint Server Subscription Edition: April 14, 2026 (KB5002853)
Summary
Important:
- If you're currently running SharePoint Workflow Manager, you must install SharePoint Workflow Manager (KB5002799) to your farm before you install this cumulative update.
- If you're currently running the Classic version of Workflow Manager, you have to enable the debug flag in order to continue using it:
$farm = Get-SPFarm
$farm.ServerDebugFlags.Add(53601)
$farm.update()
iisreset
This security update resolves Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see the following security advisories:
- Microsoft Common Vulnerabilities and Exposures CVE-2026-32201
- Microsoft Common Vulnerabilities and Exposures CVE-2026-20945
Improvements and fixes
This security update contains improvements and fixes for the following nonsecurity issues in SharePoint Server Subscription Edition:
- This update fixes the GB18030-2022 certification issue.
This update improves ingestion throughput by increasing the hit rate of the cache that's used during the ingestion process.
- This update fixes an issue in SharePoint Server Subscription Edition (On‑Premises) in which appending the query parameter p to publishing page URLs causes unexpected UI behavior. If p=2, the page renders a File Picker–style interface instead of the expected publishing page. This behavior occurs because client‑side routing logic interprets "p=2" as a page type for File Picker.
- This update fixes an issue in which the SPOONSOnboard-CloudHybridSearch-SPOONS.ps1 script fails on new tenants by updating validation to use the Azure Active Directory (Azure AD) App ID instead of the app name.
- This update fixes a rich text editor issue that prevents you from creating a line return by using the Enter key after you insert hyperlinks.
- This update fixes an issue in which the default Office options don't appear after you enable the custom document content types in a document library.

