KB5002836

Description of the security update for SharePoint Server 2019 Language Pack: February 10, 2026 (KB5002836)

Applies To

SharePoint Server 2019

Summary

Important:

• If you're running 2013-type workflows, you mustinstall the August 2025 update for SharePoint Workflow Manager to your farm before you install this cumulative update.

• If you're currently running the Classic version of Workflow Manager, you must enable the debug flag to continue using it.

$farm = Get-SPFarm

$farm.ServerDebugFlags.Add(53601)

$farm.update()

iisreset

This security update resolves Microsoft Outlook spoofing vulnerability and Microsoft Word spoofing vulnerability. To learn more about the vulnerabilities, see the following security advisories:

• Microsoft Common Vulnerabilities and Exposures CVE-2026-21511

• Microsoft Common Vulnerabilities and Exposures CVE-2026-21260

Notes:

• This is build 16.0.10417.20097 of the security update package.

• To apply this security update, you must have the release version of Microsoft SharePoint Server 2019 installed on the computer.

Improvements and fixes

This security update contains an improvement and a fix for the following nonsecurity issue in SharePoint Server 2019 Language Pack:

• Fixes the repeated failures of w3wp process that are caused by missing Dynamic Link Libraries (DLL).

• Fixes an issue in which the PDF upload in SharePoint Server Subscription Edition (SPSE) causes the w3wp process to stop responding.

• Fixes an issue in which the "Timer Service Recycle" job is nonfunctional due to dependency on the removed STSADM.EXE.

• Fixes an accessibility issue in which the discernible text isn't available for checkbox and expandable controls under the Site pages heading.

• Fixes an issue in which the SharePoint 2010 style workflow doesn't run in the...