Microsoft · Security update · August 11, 2026

KB5002896: August 2026 security update

KB5002896, released August 11, 2026, fixes 25 CVEs in Microsoft SharePoint Server 2019. One of them is being exploited (CVE-2026-65660); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

3 rated Critical

Exploited

CVE-2026-65660

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.0985

95th percentile

Priority of the 25 CVEs

Patch now 1
                                Urgent 5
                                High 8
                                Routine 11

Applies to

Product
Microsoft SharePoint Server 2019

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2026-65660	Microsoft Office SharePoint	Remote Code Execution	8.8	0.0985	KEVExploited
Urgent	CVE-2026-65665	Microsoft Office SharePoint	Remote Code Execution	8.8	0.0169	More likely
Urgent	CVE-2026-63520	Microsoft Office SharePoint	Remote Code Execution	8.1	0.0096	More likely
Urgent	CVE-2026-62827	Microsoft Office SharePoint	Elevation of Privilege	8.8	0.0094	Exploitation Less Likely
Urgent	CVE-2026-64921	Microsoft Office SharePoint	Elevation of Privilege	8.8	0.0094	Exploitation Less Likely
Urgent	CVE-2026-70355	Microsoft Office SharePoint	Elevation of Privilege	7.3	0.0078	More likely
High	CVE-2026-63514	Microsoft Office SharePoint	Remote Code Execution	8.8	0.0204	Exploitation Less Likely
High	CVE-2026-64901	Microsoft Office SharePoint	Remote Code Execution	8.8	0.0204	Exploitation Less Likely
High	CVE-2026-65658	Microsoft Office SharePoint	Remote Code Execution	8.8	0.0204	Exploitation Less Likely
High	CVE-2026-65663	Microsoft Office SharePoint	Remote Code Execution	8.8	0.0204	Exploitation Less Likely
High	CVE-2026-66808	Microsoft Office SharePoint	Remote Code Execution	8.8	0.0204	Exploitation Less Likely
High	CVE-2026-70324	Microsoft Office SharePoint	Elevation of Privilege	8.8	0.0094	Exploitation Less Likely
High	CVE-2026-64900	Microsoft Office SharePoint	Spoofing	7.3	0.0065	N/A
High	CVE-2026-57105	Microsoft Office SharePoint	Spoofing	8.0	0.0062	Exploitation Less Likely
Routine	CVE-2026-63516	Microsoft Office SharePoint	Spoofing	6.5	0.0187	Exploitation Less Likely
Routine	CVE-2026-62837	Microsoft Office SharePoint	Information Disclosure	6.5	0.0123	Exploitation Less Likely
Routine	CVE-2026-58639	Microsoft Office SharePoint	Spoofing	6.5	0.0091	Exploitation Less Likely
Routine	CVE-2026-62839	Microsoft Office SharePoint	Spoofing	6.5	0.0091	Exploitation Less Likely
Routine	CVE-2026-63512	Microsoft Office SharePoint	Tampering	6.5	0.0073	Exploitation Less Likely
Routine	CVE-2026-62917	Microsoft Office SharePoint	Spoofing	4.6	0.0058	Exploitation Less Likely
Routine	CVE-2026-64897	Microsoft Office SharePoint	Spoofing	4.6	0.0058	Exploitation Less Likely
Routine	CVE-2026-64902	Microsoft Office SharePoint	Spoofing	4.6	0.0058	N/A
Routine	CVE-2026-64916	Microsoft Office SharePoint	Spoofing	4.6	0.0058	Exploitation Unlikely
Routine	CVE-2026-64922	Microsoft Office SharePoint	Spoofing	4.6	0.0058	Exploitation Less Likely
Routine	CVE-2026-62829	Microsoft Office SharePoint	Spoofing	4.6	0.0047	Exploitation Less Likely

Released the same day

KB5002755
Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)
KB5002791
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002795
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002813
Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition)
KB5002832
Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition)
KB5002893
Microsoft SharePoint Server Subscription Edition
KB5002894
Microsoft SharePoint Server 2019
KB5002897
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002899
Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition)
KB5002900
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002901
Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)
KB5002902
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)

Vendor advisory

https://support.microsoft.com/help/5002896

Our write-up

August 2026 Patch Tuesday: The Only One Under Attack Was Rated Important

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5002896">KB5002896 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox matches the software installed on every machine to the updates that fix its CVEs, and shows which machines still need this one.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.