Description of the security update for SharePoint Server Subscription Edition: May 12, 2026 (KB5002863)

None None...

Description of the security update for SharePoint Server 2016: May 12, 2026 (KB5002868)

None None...

Description of the security update for SharePoint Server 2019: May 12, 2026 (KB5002870)

None None...

May "In the Trend of VM" (#27): high-profile vulnerabilities in Linux, ActiveMQ, SharePoint, and Adobe Acrobat Reader

May "In the Trend of VM" 27: high-profile vulnerabilities in Linux, ActiveMQ, SharePoint, and Adobe Acrobat Reader. Presenting the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. While the previous April edition featured only one vulnerability, this one...

KLA91068 ACE vulnerability in Microsoft Office

A remote code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-45659 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-SharePoint CVE list CVE-2026-4565...

CVE-2026-40365

CVE-2026-40365 : Microsoft SharePoint Server remote code execution due to insufficient granularity of access control. An authorized attacker can execute code over a network (CVSS v3.1: 8.8, HIGH; AV:N/AC:L/PR:L/UI:N/S:U). Public docs confirm the issue and that Microsoft released security updates ...

CVE-2026-40365 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-40357 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-40357

Technical details for CVE-2026-40357 are not publicly available in the provided documents. Monitor for updates from Microsoft and CVE records.

CVE-2026-33112 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-33112

Technical details for CVE-2026-33112 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2026-33110 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-33110 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-33110

CVE-2026-33110 describes a deserialization vulnerability in Microsoft SharePoint that could allow an authorized network attacker to execute code. Affected products include Microsoft SharePoint Server variants; the risk is tied to deserializing untrusted data. Remediations are provided by Microsof...

CVE-2026-40368 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-40368

CVE-2026-40368 is a remote code execution vulnerability in Microsoft SharePoint Server caused by deserialization of untrusted data. The issue affects SharePoint Server on-premises (various versions) and can be triggered by processing crafted data over the network by an authenticated user, with CV...

CVE-2026-40368 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-35439

CVE-2026-35439 is a remote code execution vulnerability in Microsoft SharePoint Server caused by deserialization of untrusted data. An authorized attacker can exploit this over a network to execute code on affected systems. The CVE is associated with SharePoint Server (on‑premises) and the approv...

CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability

...