KB5002882: CVEs fixed (Windows update (KB))

KB5002882 fixes 3 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-55040 CRITICAL 9.1 EXPLOITED UPGRADE Microsoft SharePoint Weak Authentication Vulnerability
• CVE-2026-50522 CRITICAL 9.8 EXPLOITED UPGRADE Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
• CVE-2026-56164 MEDIUM 5.3 EXPLOITED UPGRADE Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Applies to

• Microsoft SharePoint Server Subscription Edition · fixed in 16.0.19725.20434

← Back to latest CVEs