Microsoft · Security update · July 14, 2026

KB5002891: July 2026 security update

KB5002891, released July 14, 2026, fixes 40 CVEs in Microsoft SharePoint Enterprise Server 2016. 3 of them are being exploited (CVE-2026-55040); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEVUnsupported product
CVEs closed
40
6 rated Critical
Exploited
3
CVE-2026-55040
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6954
99th percentile

Priority of the 40 CVEs

Patch now 3 Urgent 4 High 13 Routine 20

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-55040 Microsoft Office SharePoint Security Feature Bypass 9.1 0.6954 KEVExploited
Patch now CVE-2026-50522 Microsoft Office SharePoint Remote Code Execution 9.8 0.0304 KEVExploited
Patch now CVE-2026-56164 Microsoft Office SharePoint Elevation of Privilege 5.3 0.0101 KEVExploited
Urgent CVE-2026-55033 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Less Likely
Urgent CVE-2026-55127 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Less Likely
Urgent CVE-2026-55132 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Less Likely
Urgent CVE-2026-55045 Microsoft Office Remote Code Execution 8.4 0.0045 Exploitation Less Likely
High CVE-2026-55021 Microsoft Office SharePoint Spoofing 7.3 0.0095 Exploitation Unlikely
High CVE-2026-55034 Microsoft Office SharePoint Spoofing 7.3 0.0095 Exploitation Less Likely
High CVE-2026-55052 Microsoft Office SharePoint Elevation of Privilege 8.8 0.0094 Exploitation Unlikely
High CVE-2026-58277 Microsoft Office SharePoint Elevation of Privilege 8.8 0.0094 Exploitation Less Likely
High CVE-2026-55126 Microsoft Office SharePoint Spoofing 7.3 0.0065 Exploitation Less Likely
High CVE-2026-55032 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Less Likely
High CVE-2026-55038 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Unlikely
High CVE-2026-55055 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Less Likely
High CVE-2026-55125 Microsoft Office Remote Code Execution 7.8 0.0057 Exploitation Less Likely
High CVE-2026-55128 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Unlikely
High CVE-2026-55130 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Unlikely
High CVE-2026-55134 Microsoft Office Word Remote Code Execution 7.8 0.0057 Exploitation Unlikely
High CVE-2026-97783 Microsoft Office SharePoint Spoofing 8.1 0.0050 Exploitation Less Likely
Routine CVE-2026-54108 Microsoft Office SharePoint Spoofing 6.5 0.0108 Exploitation Less Likely
Routine CVE-2026-55051 Microsoft Office SharePoint Information Disclosure 6.5 0.0091 Exploitation Less Likely
Routine CVE-2026-55023 Microsoft Office Information Disclosure 5.5 0.0060 Exploitation Unlikely
Routine CVE-2026-55027 Microsoft Office Information Disclosure 5.5 0.0060 Exploitation Less Likely
Routine CVE-2026-55028 Microsoft Office Information Disclosure 5.5 0.0060 Exploitation Less Likely
Showing 1 to 25 of 40 1Next