Updates for SharePoint Server Subscription Edition (May 2025 CU)

18 May 2025    |    Comments   Comments: 0

A new cumulative update (May 2025 CU) has been released for SharePoint Server Subscription Edition.

SP Build:
16.0.18526.20286

Starting with the March 2023 CU, updates for SharePoint Server Subscription Edition are released as a single package (known as an Uber package) containing both language-independent and language-dependent fixes. Only one package needs to be installed to fully update the server.

SharePoint Subscription Edition CU – KB articles describing the CU:

  • KB 5002709 – May 2025 Update for SharePoint Server Subscription Edition

SharePoint Server Subscription Edition CU – CU download links:

After installation, remember to run the SharePoint Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

To speed up CU installation, I recommend following the guidance in How to speed up CU installation in SharePoint Server Subscription Edition.

The language you select when downloading the update does not matter because the same package is downloaded for every language.

Note for this CU:

Installing this update requires the release version of SharePoint Server Subscription Edition.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server Subscription Edition

This CU addresses remote code execution and elevation of privilege vulnerabilities: CVE-2025-29976, CVE-2025-30378, CVE-2025-30382, CVE-2025-30384.

The unified update in KB 5002709 includes these SharePoint Server Subscription Edition changes:

  • Adds Get-SPHybridDocVroomId to retrieve VroomId for hybrid search scenarios.

  • Makes the new Hybrid Search feature available in the Standard release ring. To onboard the new Hybrid Search Experience, download and run Microsoft’s Onboard-CloudHybridSearch-SPOONS.ps1. Search Content Service (SCS) retires on June 30, 2025.

  • Fixes an issue where modern Quick Links web parts can break during zero downtime patching (ZDP) that uses the Side-by-Side token.

  • Fixes an issue where My Site repeatedly requests authentication from users without permissions to followed sites.

  • Fixes an issue where the User Information list cannot be filtered when it contains an indexed column and more than 500 items.

  • Fixes an issue where Data Loss Prevention (DLP) policy tips fail on SharePoint subsites.

Comments are closed.