KB5002894: CVEs fixed (Windows update (KB))

KB5002894 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-57105 HIGH 8.0 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share
• CVE-2026-65660 HIGH 8.8 EXPLOITED UPGRADE Microsoft SharePoint Code Injection Vulnerability

Applies to

• Microsoft SharePoint Server 2019 · fixed in 16.0.10417.20198

← Back to latest CVEs