KB5002882: what it fixes and who gets it
KB5002882 is a security update from Microsoft's July 2026 release for Microsoft SharePoint Server Subscription Edition.
Microsoft data read
Should you install it?
Yes, and soon: it closes a hole that was already being used in real attacks before the fix was released. Windows Update installs it automatically on supported home PCs.
If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.
Security fixes in KB5002882
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege Vulnerability | Elevation of Privilege | 5.3 | ExploitedModerate |
| CVE-2026-50522Microsoft SharePoint Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability | Security Feature Bypass | 9.1 | Critical |
| CVE-2026-55045Microsoft Office Remote Code Execution Vulnerability | Remote Code Execution | 8.4 | Critical |
| CVE-2026-55033Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-55127Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-55132Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Critical |
| CVE-2026-55052Microsoft SharePoint Elevation of Privilege Vulnerability | Elevation of Privilege | 8.8 | Important |
| CVE-2026-55032Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
| CVE-2026-55038Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
| CVE-2026-55055Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
| CVE-2026-55125Microsoft Office Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
| CVE-2026-55128Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
| CVE-2026-55130Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
| CVE-2026-55134Microsoft Word Remote Code Execution Vulnerability | Remote Code Execution | 7.8 | Important |
| CVE-2026-55021Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 7.3 | Important |
| CVE-2026-55034Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 7.3 | Important |
| CVE-2026-55126Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 7.3 | Important |
| CVE-2026-54108Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 6.5 | Important |
| CVE-2026-55051Microsoft SharePoint Server Information Disclosure Vulnerability | Information Disclosure | 6.5 | Important |
| CVE-2026-55026Microsoft Office Information Disclosure Vulnerability | Information Disclosure | 6.2 | Important |
| CVE-2026-55023Microsoft Office Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-55027Microsoft Office Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-55028Microsoft Office Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-55035Microsoft Office Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-55047Microsoft Office Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-55050Microsoft Word Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-55121Microsoft Office Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-55124Microsoft Word Information Disclosure Vulnerability | Remote Code Execution | 5.5 | Important |
| CVE-2026-55142Microsoft Word Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-56192Microsoft Office Information Disclosure Vulnerability | Information Disclosure | 5.5 | Important |
| CVE-2026-56157Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 5.4 | Important |
| CVE-2026-55016Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 4.6 | Important |
| CVE-2026-55019Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 4.6 | Important |
| CVE-2026-55020Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 4.6 | Important |
| CVE-2026-55030Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 4.6 | Important |
| CVE-2026-55135Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 4.6 | Important |
| CVE-2026-62826Microsoft SharePoint Server Spoofing Vulnerability | Spoofing | 4.6 | Important |
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…