Updates for SharePoint Server 2019 (September 2025 CU)

A new cumulative update (September 2025 CU) has been released for SharePoint Server 2019.

SP Build:
16.0.10417.20047 (Language independent CU)
16.0.10417.20047 (Language dependent CU)

SharePoint 2019 CU – KB articles describing the CU:

• KB 5002775 – September 2025 Update for SharePoint Server 2019 (language independent)
• KB 5002774 – September 2025 Update for SharePoint Server 2019 (language dependent)

SharePoint Server 2019 CU – CU download links:

• Download September 2025 Update for SharePoint Server 2019 (language independent)
• Download September 2025 Update for SharePoint Server 2019 (language dependent)

After installation, remember to run the SharePoint 2019 Products Configuration Wizard or the following command:

PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

Important notes

Always install both packages in this order:

1. language independent components (core CU)
2. language-dependent components (language CU)

For language-dependent packages, the language you select does not matter because each package contains updates for all languages.

If you install a new language pack on a SharePoint Server 2019 farm, you must reinstall the language-dependent update afterwards.

Remember to keep Distributed Cache updated as well as SharePoint. See How to update Distributed Cache correctly (in Czech).

Note for this CU:

KB 5002775 and KB 5002774 require the release version of SharePoint Server 2019 to be installed.

Before installing this CU, farms running 2013-style workflows must install the August 2025 patch for SharePoint Workflow Manager. Farms using classic Workflow Manager must upgrade to the latest build of SharePoint Workflow Manager. Using workflows in SharePoint Server now requires the latest SharePoint Workflow Manager update.

Included fixes and improvements

The following overview summarizes the fixes and improvements in this CU based on the official Microsoft KB articles.

SharePoint Server 2019

KB 5002775 addresses remote code execution in Microsoft Office and SharePoint, and information disclosure in Microsoft Word. The advisories are CVE-2025-54906, CVE-2025-54905, CVE-2025-54897.

KB 5002774 addresses information disclosure in Microsoft Word. See CVE-2025-54905.

The language-independent package KB 5002775 includes these SharePoint Server 2019 changes:

• Restricts members of WSS_WPG from running administrative processes, including the SharePoint Products Configuration Wizard (Psconfig), to strengthen SharePoint Server security. See Account permissions and security settings in SharePoint Servers.

• Adds Test-DefenderAndAmsiWorkProperly in the SharePoint Management Shell to check that all Windows Defender components are installed and active and that SharePoint AMSI integration works correctly.

• Fixes an issue where outgoing email using the GB18030 character set displays some characters incorrectly.

• Enables automatic machine key rotation.

• Enhances the AMSI Filter feature module and changes its default setting to always on.