KB5002927: CVEs fixed (Windows update (KB))

KB5002927 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-69943 HIGH 8.8 UPGRADE Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint
• CVE-2026-85900 HIGH 8.8 UPGRADE Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code

Applies to

• Microsoft SharePoint Server Subscription Edition · fixed in 16.0.20326.20190

← Back to latest CVEs