Microsoft · Security update · August 11, 2026

KB5002906: August 2026 security update

KB5002906, released August 11, 2026, fixes 21 CVEs in Microsoft SharePoint Enterprise Server 2016. One of them is being exploited (CVE-2026-65660); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
21
2 rated Critical
Exploited
1
CVE-2026-65660
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.0819
94th percentile

Priority of the 21 CVEs

Patch now 1 Urgent 3 High 7 Routine 10

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-65660 Microsoft Office SharePoint Remote Code Execution 8.8 0.0819 KEVExploited
Urgent CVE-2026-63520 Microsoft Office SharePoint Remote Code Execution 8.1 0.0096 More likely
Urgent CVE-2026-62827 Microsoft Office SharePoint Elevation of Privilege 8.8 0.0094 Exploitation Less Likely
Urgent CVE-2026-64921 Microsoft Office SharePoint Elevation of Privilege 8.8 0.0094 Exploitation Less Likely
High CVE-2026-63514 Microsoft Office SharePoint Remote Code Execution 8.8 0.0204 Exploitation Less Likely
High CVE-2026-64901 Microsoft Office SharePoint Remote Code Execution 8.8 0.0204 Exploitation Less Likely
High CVE-2026-65658 Microsoft Office SharePoint Remote Code Execution 8.8 0.0204 Exploitation Less Likely
High CVE-2026-65663 Microsoft Office SharePoint Remote Code Execution 8.8 0.0204 Exploitation Less Likely
High CVE-2026-66808 Microsoft Office SharePoint Remote Code Execution 8.8 0.0204 Exploitation Less Likely
High CVE-2026-70324 Microsoft Office SharePoint Elevation of Privilege 8.8 0.0094 Exploitation Less Likely
High CVE-2026-64900 Microsoft Office SharePoint Spoofing 7.3 0.0065 N/A
Routine CVE-2026-63516 Microsoft Office SharePoint Spoofing 6.5 0.0187 Exploitation Less Likely
Routine CVE-2026-62837 Microsoft Office SharePoint Information Disclosure 6.5 0.0123 Exploitation Less Likely
Routine CVE-2026-58639 Microsoft Office SharePoint Spoofing 6.5 0.0091 Exploitation Less Likely
Routine CVE-2026-62839 Microsoft Office SharePoint Spoofing 6.5 0.0091 Exploitation Less Likely
Routine CVE-2026-63512 Microsoft Office SharePoint Tampering 6.5 0.0073 Exploitation Less Likely
Routine CVE-2026-62917 Microsoft Office SharePoint Spoofing 4.6 0.0058 Exploitation Less Likely
Routine CVE-2026-64897 Microsoft Office SharePoint Spoofing 4.6 0.0058 Exploitation Less Likely
Routine CVE-2026-64902 Microsoft Office SharePoint Spoofing 4.6 0.0058 N/A
Routine CVE-2026-64916 Microsoft Office SharePoint Spoofing 4.6 0.0058 Exploitation Unlikely
Routine CVE-2026-64922 Microsoft Office SharePoint Spoofing 4.6 0.0058 Exploitation Less Likely
Showing 1 to 21 of 21 1