Microsoft · Security update · October 16, 2025

KB5002772: October 2025 security update

KB5002772, released October 16, 2025, fixes 2 CVEs in Microsoft SharePoint Enterprise Server 2016. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
2
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0055
45th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 1 High 0 Routine 1

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-53733 Microsoft Office Word Remote Code Execution 8.4 0.0055 Exploitation Less Likely
Routine CVE-2025-53736 Microsoft Office Word Information Disclosure 6.8 0.0050 Exploitation Less Likely
Showing 1 to 2 of 2 1