# KB5002906: August 2026 security update

KB5002906, released August 11, 2026, fixes 21 CVEs in Microsoft SharePoint Enterprise Server 2016. One of them is being exploited (CVE-2026-65660); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb5002906
- Platform: Microsoft
- Released: Aug 11, 2026
- Priority: Patch now (Closes CVE-2026-65660, exploited (CISA KEV))
- CVEs: 21, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://support.microsoft.com/help/5002906

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Microsoft SharePoint Enterprise Server 2016](https://patchblox.com/security/data/product/microsoft/microsoft-sharepoint-enterprise-server-2016.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-65660](https://patchblox.com/security/data/cve/CVE-2026-65660.md) | Patch now | Microsoft Office SharePoint | 8.8 | 0.0819 | CISA KEV |
| [CVE-2026-63520](https://patchblox.com/security/data/cve/CVE-2026-63520.md) | Urgent | Microsoft Office SharePoint | 8.1 | 0.0096 | More likely |
| [CVE-2026-62827](https://patchblox.com/security/data/cve/CVE-2026-62827.md) | Urgent | Microsoft Office SharePoint | 8.8 | 0.0094 |  |
| [CVE-2026-64921](https://patchblox.com/security/data/cve/CVE-2026-64921.md) | Urgent | Microsoft Office SharePoint | 8.8 | 0.0094 |  |
| [CVE-2026-63514](https://patchblox.com/security/data/cve/CVE-2026-63514.md) | High | Microsoft Office SharePoint | 8.8 | 0.0204 |  |
| [CVE-2026-64901](https://patchblox.com/security/data/cve/CVE-2026-64901.md) | High | Microsoft Office SharePoint | 8.8 | 0.0204 |  |
| [CVE-2026-65658](https://patchblox.com/security/data/cve/CVE-2026-65658.md) | High | Microsoft Office SharePoint | 8.8 | 0.0204 |  |
| [CVE-2026-65663](https://patchblox.com/security/data/cve/CVE-2026-65663.md) | High | Microsoft Office SharePoint | 8.8 | 0.0204 |  |
| [CVE-2026-66808](https://patchblox.com/security/data/cve/CVE-2026-66808.md) | High | Microsoft Office SharePoint | 8.8 | 0.0204 |  |
| [CVE-2026-70324](https://patchblox.com/security/data/cve/CVE-2026-70324.md) | High | Microsoft Office SharePoint | 8.8 | 0.0094 |  |
| [CVE-2026-64900](https://patchblox.com/security/data/cve/CVE-2026-64900.md) | High | Microsoft Office SharePoint | 7.3 | 0.0065 |  |
| [CVE-2026-63516](https://patchblox.com/security/data/cve/CVE-2026-63516.md) | Routine | Microsoft Office SharePoint | 6.5 | 0.0187 |  |
| [CVE-2026-62837](https://patchblox.com/security/data/cve/CVE-2026-62837.md) | Routine | Microsoft Office SharePoint | 6.5 | 0.0123 |  |
| [CVE-2026-58639](https://patchblox.com/security/data/cve/CVE-2026-58639.md) | Routine | Microsoft Office SharePoint | 6.5 | 0.0091 |  |
| [CVE-2026-62839](https://patchblox.com/security/data/cve/CVE-2026-62839.md) | Routine | Microsoft Office SharePoint | 6.5 | 0.0091 |  |
| [CVE-2026-63512](https://patchblox.com/security/data/cve/CVE-2026-63512.md) | Routine | Microsoft Office SharePoint | 6.5 | 0.0073 |  |
| [CVE-2026-62917](https://patchblox.com/security/data/cve/CVE-2026-62917.md) | Routine | Microsoft Office SharePoint | 4.6 | 0.0058 |  |
| [CVE-2026-64897](https://patchblox.com/security/data/cve/CVE-2026-64897.md) | Routine | Microsoft Office SharePoint | 4.6 | 0.0058 |  |
| [CVE-2026-64902](https://patchblox.com/security/data/cve/CVE-2026-64902.md) | Routine | Microsoft Office SharePoint | 4.6 | 0.0058 |  |
| [CVE-2026-64916](https://patchblox.com/security/data/cve/CVE-2026-64916.md) | Routine | Microsoft Office SharePoint | 4.6 | 0.0058 |  |
| [CVE-2026-64922](https://patchblox.com/security/data/cve/CVE-2026-64922.md) | Routine | Microsoft Office SharePoint | 4.6 | 0.0058 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo