KB5002908: what it fixes and who gets it
KB5002908 is a security update from Microsoft's September 2026 release for Microsoft SharePoint Server Subscription Edition.
Microsoft data read
Should you install it?
Yes. It is a routine security update; none of its fixes are rated Critical or reported as exploited. Windows Update installs it automatically on supported home PCs.
If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.
Security fixes in KB5002908
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-69268Microsoft Office SharePoint Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-69273Microsoft Office SharePoint Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-69282Microsoft Office SharePoint Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-69464Microsoft Office SharePoint Elevation of Privilege Vulnerability | Elevation of Privilege | 8.8 | Important |
| CVE-2026-69465Microsoft Office SharePoint Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-69716Microsoft Office SharePoint Elevation of Privilege Vulnerability | Elevation of Privilege | 8.8 | Important |
| CVE-2026-69724Microsoft Office SharePoint Remote Code Execution Vulnerability | Remote Code Execution | 8.8 | Important |
| CVE-2026-69804Microsoft Office SharePoint Remote Code Execution Vulnerability | Remote Code Execution | 7.5 | Important |
| CVE-2026-69402Microsoft Office SharePoint Spoofing Vulnerability | Spoofing | 7.3 | Important |
| CVE-2026-69417Microsoft Office SharePoint Spoofing Vulnerability | Spoofing | 7.3 | Important |
| CVE-2026-69409Microsoft Office SharePoint Information Disclosure Vulnerability | Information Disclosure | 6.5 | Important |
| CVE-2026-69636Microsoft Office SharePoint Information Disclosure Vulnerability | Information Disclosure | 6.5 | Important |
| CVE-2026-69683Microsoft Office SharePoint Information Disclosure Vulnerability | Information Disclosure | 6.5 | Important |
| CVE-2026-69690Microsoft Office SharePoint Spoofing Vulnerability | Spoofing | 4.6 | Important |
| CVE-2026-69615Microsoft Office SharePoint Spoofing Vulnerability | Spoofing | 3.5 | Important |
| CVE-2026-69904Microsoft Office SharePoint Information Disclosure Vulnerability | Information Disclosure | 3.5 | Important |
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…