KB5002882

Security update fixing 38 CVEs

Support article Update Catalog CVEs in Security CVE list for a ticket

0Windows versions

38CVEs fixed · 6 critical

3Exploited or in CISA KEV

0Open known issues affecting it

—Restart required (per MSRC)

Known issues in this update

Windows release health

No known issues listed

Windows release health lists no issues from this KB or the update it builds on.

Issues this update resolves

No resolved issues listed

Windows release health names no issues fixed by this KB.

Security fixes

38 Microsoft CVEs · most urgent first

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status
CVE-2026-55040	Microsoft SharePoint Server Security Feature Bypass VulnerabilityMicrosoft Office SharePoint	Critical	9.1	18%	Security Feature Bypass	CISA KEV · due 21 Aug
CVE-2026-50522	Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Critical	9.8	3.0%	Remote Code Execution	CISA KEV · due 25 Jul
CVE-2026-56164	Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Moderate	5.3	1.0%	Elevation of Privilege	ExploitedCISA KEV · due 17 Jul
CVE-2026-55045	Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office	Critical	8.4	0.4%	Remote Code Execution
CVE-2026-55033	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Critical	7.8	0.6%	Remote Code Execution
CVE-2026-55127	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Critical	7.8	0.6%	Remote Code Execution
CVE-2026-55132	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Critical	7.8	0.6%	Remote Code Execution
CVE-2026-55052	Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	0.9%	Elevation of Privilege
CVE-2026-55032	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	7.8	0.6%	Remote Code Execution
CVE-2026-55038	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	7.8	0.6%	Remote Code Execution
CVE-2026-55055	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	7.8	0.6%	Remote Code Execution
CVE-2026-55125	Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office	Important	7.8	0.6%	Remote Code Execution
CVE-2026-55128	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	7.8	0.6%	Remote Code Execution
CVE-2026-55130	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	7.8	0.6%	Remote Code Execution
CVE-2026-55134	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	7.8	0.6%	Remote Code Execution	Revised 22 Sep
CVE-2026-55021	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	0.9%	Spoofing
CVE-2026-55034	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	0.9%	Spoofing
CVE-2026-55126	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	0.6%	Spoofing
CVE-2026-54108	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	6.5	1.1%	Spoofing
CVE-2026-55051	Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	0.9%	Information Disclosure
CVE-2026-55026	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	6.2	0.4%	Information Disclosure
CVE-2026-55023	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	5.5	0.6%	Information Disclosure
CVE-2026-55027	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	5.5	0.6%	Information Disclosure
CVE-2026-55028	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	5.5	0.6%	Information Disclosure
CVE-2026-55035	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	5.5	0.6%	Information Disclosure
CVE-2026-55047	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	5.5	0.6%	Information Disclosure
CVE-2026-55050	Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	5.5	0.6%	Information Disclosure	Revised 6 Aug
CVE-2026-55121	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	5.5	0.5%	Information Disclosure	Revised 17 Sep
CVE-2026-55124	Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	5.5	0.6%	Remote Code Execution
CVE-2026-55142	Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	5.5	0.6%	Information Disclosure
CVE-2026-56192	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	5.5	0.6%	Information Disclosure
CVE-2026-56157	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	5.4	0.5%	Spoofing
CVE-2026-55016	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	0.6%	Spoofing
CVE-2026-55019	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	0.6%	Spoofing
CVE-2026-55020	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	0.6%	Spoofing
CVE-2026-55030	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	0.6%	Spoofing
CVE-2026-55135	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	0.6%	Spoofing
CVE-2026-62826	Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	0.6%	Spoofing