KB5002893: CVEs fixed (Windows update (KB))

KB5002893 fixes 4 tracked CVEs. Affected systems and fixed versions.

CVE-2026-70321 HIGH 8.8 UPGRADE Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code
CVE-2026-70326 HIGH 8.8 UPGRADE Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate pri
CVE-2026-57105 HIGH 8.0 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share
CVE-2026-65660 HIGH 8.8 EXPLOITED UPGRADE Microsoft SharePoint Code Injection Vulnerability

Applies to