Microsoft · Security update · May 12, 2026

KB5002870: May 2026 security update

KB5002870, released May 12, 2026, fixes 9 CVEs in Microsoft SharePoint Server 2019. One of them is being exploited (CVE-2026-45659); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
9
2 rated Critical
Exploited
1
CVE-2026-45659
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8024
99th percentile

Priority of the 9 CVEs

Patch now 1 Urgent 2 High 6 Routine 0

Applies to

Product
Microsoft SharePoint Server 2019

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-45659 Microsoft Office SharePoint Remote Code Execution 8.8 0.8024 KEVRansomwareExploited
Urgent CVE-2026-40365 Microsoft Office SharePoint Remote Code Execution 8.8 0.0096 Exploitation Less Likely
Urgent CVE-2026-40367 Microsoft Office Word Remote Code Execution 8.4 0.0045 Exploitation Unlikely
High CVE-2026-33112 Microsoft Office SharePoint Remote Code Execution 8.8 0.3112 Exploitation Less Likely
High CVE-2026-35439 Microsoft Office SharePoint Remote Code Execution 8.8 0.0203 Exploitation Less Likely
High CVE-2026-33110 Microsoft Office SharePoint Remote Code Execution 8.8 0.0197 Exploitation Less Likely
High CVE-2026-40368 Microsoft Office SharePoint Remote Code Execution 8.0 0.0182 Exploitation Less Likely
High CVE-2026-40357 Microsoft Office SharePoint Remote Code Execution 8.8 0.0170 Exploitation Less Likely
High CVE-2026-47294 Microsoft Office SharePoint Remote Code Execution 8.0 0.0061 Exploitation Less Likely
Showing 1 to 9 of 9 1