Microsoft · Security update · July 14, 2026
KB5002885: July 2026 security update
KB5002885, released July 14, 2026, fixes 22 CVEs in Microsoft SharePoint Server 2019. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
22
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0060
48th percentile
Priority of the 22 CVEs
Patch now 0
Urgent 4
High 7
Routine 11
Applies to
| Product |
|---|
| Microsoft SharePoint Server 2019 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-55033 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Less Likely |
| Urgent | CVE-2026-55127 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Less Likely |
| Urgent | CVE-2026-55132 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Less Likely |
| Urgent | CVE-2026-55045 | Microsoft Office | Remote Code Execution | 8.4 | 0.0045 | Exploitation Less Likely |
| High | CVE-2026-55032 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Less Likely |
| High | CVE-2026-55038 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Unlikely |
| High | CVE-2026-55055 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Less Likely |
| High | CVE-2026-55125 | Microsoft Office | Remote Code Execution | 7.8 | 0.0057 | Exploitation Less Likely |
| High | CVE-2026-55128 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Unlikely |
| High | CVE-2026-55130 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Unlikely |
| High | CVE-2026-55134 | Microsoft Office Word | Remote Code Execution | 7.8 | 0.0057 | Exploitation Unlikely |
| Routine | CVE-2026-55023 | Microsoft Office | Information Disclosure | 5.5 | 0.0060 | Exploitation Unlikely |
| Routine | CVE-2026-55027 | Microsoft Office | Information Disclosure | 5.5 | 0.0060 | Exploitation Less Likely |
| Routine | CVE-2026-55028 | Microsoft Office | Information Disclosure | 5.5 | 0.0060 | Exploitation Less Likely |
| Routine | CVE-2026-55047 | Microsoft Office | Information Disclosure | 5.5 | 0.0060 | Exploitation Less Likely |
| Routine | CVE-2026-55050 | Microsoft Office Word | Information Disclosure | 5.5 | 0.0060 | N/A |
| Routine | CVE-2026-55124 | Microsoft Office Word | Remote Code Execution | 5.5 | 0.0060 | Exploitation Less Likely |
| Routine | CVE-2026-55142 | Microsoft Office Word | Information Disclosure | 5.5 | 0.0060 | Exploitation Less Likely |
| Routine | CVE-2026-56192 | Microsoft Office | Information Disclosure | 5.5 | 0.0060 | Exploitation Less Likely |
| Routine | CVE-2026-55035 | Microsoft Office | Information Disclosure | 5.5 | 0.0057 | Exploitation Less Likely |
| Routine | CVE-2026-55121 | Microsoft Office | Information Disclosure | 5.5 | 0.0051 | Exploitation Unlikely |
| Routine | CVE-2026-55026 | Microsoft Office | Information Disclosure | 6.2 | 0.0045 | Exploitation Less Likely |
Showing 1 to 22 of 22
1