KB5002870: CVEs fixed (Windows update (KB))

KB5002870 fixes 4 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-33112 HIGH 8.8 UPGRADE Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code
• CVE-2026-33110 HIGH 8.8 UPGRADE Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code
• CVE-2026-35439 HIGH 8.8 UPGRADE Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code
• CVE-2026-40357 HIGH 8.8 UPGRADE Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code

Applies to

• Microsoft SharePoint Server 2019 · fixed in 16.0.10417.20128

← Back to latest CVEs