Microsoft · Security update · August 11, 2026
KB5002893: August 2026 security update
KB5002893, released August 11, 2026, fixes 29 CVEs in Microsoft SharePoint Server Subscription Edition. One of them is being exploited (CVE-2026-65660); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
29
3 rated Critical
Exploited
1
CVE-2026-65660
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.0819
94th percentile
Priority of the 29 CVEs
Patch now 1
Urgent 5
High 11
Routine 12
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2026-65660 | Microsoft Office SharePoint | Remote Code Execution | 8.8 | 0.0819 | KEVExploited |
| Urgent | CVE-2026-65665 | Microsoft Office SharePoint | Remote Code Execution | 8.8 | 0.0169 | More likely |
| Urgent | CVE-2026-63520 | Microsoft Office SharePoint | Remote Code Execution | 8.1 | 0.0096 | More likely |
| Urgent | CVE-2026-62827 | Microsoft Office SharePoint | Elevation of Privilege | 8.8 | 0.0094 | Exploitation Less Likely |
| Urgent | CVE-2026-64921 | Microsoft Office SharePoint | Elevation of Privilege | 8.8 | 0.0094 | Exploitation Less Likely |
| Urgent | CVE-2026-70355 | Microsoft Office SharePoint | Elevation of Privilege | 7.3 | 0.0078 | More likely |
| High | CVE-2026-63514 | Microsoft Office SharePoint | Remote Code Execution | 8.8 | 0.0204 | Exploitation Less Likely |
| High | CVE-2026-64901 | Microsoft Office SharePoint | Remote Code Execution | 8.8 | 0.0204 | Exploitation Less Likely |
| High | CVE-2026-65658 | Microsoft Office SharePoint | Remote Code Execution | 8.8 | 0.0204 | Exploitation Less Likely |
| High | CVE-2026-65663 | Microsoft Office SharePoint | Remote Code Execution | 8.8 | 0.0204 | Exploitation Less Likely |
| High | CVE-2026-66808 | Microsoft Office SharePoint | Remote Code Execution | 8.8 | 0.0204 | Exploitation Less Likely |
| High | CVE-2026-70321 | Microsoft Office SharePoint | Remote Code Execution | 8.8 | 0.0169 | Exploitation Less Likely |
| High | CVE-2026-70306 | Microsoft Office SharePoint | Spoofing | 9.3 | 0.0101 | Exploitation Less Likely |
| High | CVE-2026-70324 | Microsoft Office SharePoint | Elevation of Privilege | 8.8 | 0.0094 | Exploitation Less Likely |
| High | CVE-2026-70326 | Microsoft Office SharePoint | Elevation of Privilege | 8.8 | 0.0078 | Exploitation Less Likely |
| High | CVE-2026-64900 | Microsoft Office SharePoint | Spoofing | 7.3 | 0.0065 | N/A |
| High | CVE-2026-57105 | Microsoft Office SharePoint | Spoofing | 8.0 | 0.0062 | Exploitation Less Likely |
| Routine | CVE-2026-63516 | Microsoft Office SharePoint | Spoofing | 6.5 | 0.0187 | Exploitation Less Likely |
| Routine | CVE-2026-62837 | Microsoft Office SharePoint | Information Disclosure | 6.5 | 0.0123 | Exploitation Less Likely |
| Routine | CVE-2026-58639 | Microsoft Office SharePoint | Spoofing | 6.5 | 0.0091 | Exploitation Less Likely |
| Routine | CVE-2026-62839 | Microsoft Office SharePoint | Spoofing | 6.5 | 0.0091 | Exploitation Less Likely |
| Routine | CVE-2026-63512 | Microsoft Office SharePoint | Tampering | 6.5 | 0.0073 | Exploitation Less Likely |
| Routine | CVE-2026-62917 | Microsoft Office SharePoint | Spoofing | 4.6 | 0.0058 | Exploitation Less Likely |
| Routine | CVE-2026-64897 | Microsoft Office SharePoint | Spoofing | 4.6 | 0.0058 | Exploitation Less Likely |
| Routine | CVE-2026-64902 | Microsoft Office SharePoint | Spoofing | 4.6 | 0.0058 | N/A |
Showing 1 to 25 of 29
1Next