59/59 sources · synced 00:50 UTC Customize Public mode
KB5002906

Security update fixing 22 CVEs

Support article Update Catalog CVEs in Security CVE list for a ticket
0Windows versions
22CVEs fixed · 2 critical
1Exploited or in CISA KEV
0Open known issues affecting it
—Restart required (per MSRC)

Known issues in this update

Windows release health

No known issues listed

Windows release health lists no issues from this KB or the update it builds on.

Issues this update resolves

No resolved issues listed

Windows release health names no issues fixed by this KB.

Security fixes

22 Microsoft CVEs · most urgent first
CVE Vulnerability Severity CVSSEPSSImpact Status
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint Important 8.82.1%Remote Code Execution CISA KEV · due 28 SepRevised 25 Sep
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint Critical 8.80.9%Elevation of Privilege
CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft Office SharePoint Critical 8.80.9%Elevation of Privilege
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint Important 8.82.0%Remote Code Execution
CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint Important 8.82.0%Remote Code Execution Revised 9 Sep
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint Important 8.82.0%Remote Code Execution
CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint Important 8.82.0%Remote Code Execution
CVE-2026-66805 Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint Important 8.82.0%Remote Code Execution
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint Important 8.82.0%Remote Code Execution
CVE-2026-70324 Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint Important 8.80.9%Elevation of Privilege Revised 24 Sep
CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint Important 8.11.0%Remote Code Execution
CVE-2026-64900 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 7.30.6%Spoofing
CVE-2026-58639 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 6.50.9%Spoofing
CVE-2026-62837 Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft Office SharePoint Important 6.51.2%Information Disclosure
CVE-2026-62839 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 6.50.9%Spoofing
CVE-2026-63512 Microsoft SharePoint Server Tampering VulnerabilityMicrosoft Office SharePoint Important 6.50.7%Tampering
CVE-2026-63516 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 6.51.9%Spoofing Revised 21 Sep
CVE-2026-62917 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 4.60.6%Spoofing
CVE-2026-64897 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 4.60.6%Spoofing
CVE-2026-64902 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 4.60.6%Spoofing
CVE-2026-64916 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 4.60.6%Spoofing
CVE-2026-64922 Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft Office SharePoint Important 4.60.6%Spoofing
ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft. Microsoft, Windows, Microsoft 365, Azure, and related names are trademarks of the Microsoft group of companies. Data comes from public sources listed on Sources; every item links to its original page. Dates and statuses can change after they are read. Built by Evotec. This is the public demo. It can also run on your own server, with your Microsoft 365 tenant and device data kept inside your network; Evotec can help you deploy and extend it.