Microsoft · Security update · July 14, 2026

KB5002890: July 2026 security update

KB5002890, released July 14, 2026, fixes 12 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
12
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0060
48th percentile

Priority of the 12 CVEs

Patch now 0 Urgent 3 High 6 Routine 3

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-55033 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Less Likely
Urgent CVE-2026-55127 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Less Likely
Urgent CVE-2026-55132 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Less Likely
High CVE-2026-55032 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Less Likely
High CVE-2026-55038 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Unlikely
High CVE-2026-55055 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Less Likely
High CVE-2026-55128 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Unlikely
High CVE-2026-55130 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Unlikely
High CVE-2026-55134 Microsoft Office WordRemote Code Execution7.8 0.0057 Exploitation Unlikely
Routine CVE-2026-55050 Microsoft Office WordInformation Disclosure5.5 0.0060 N/A
Routine CVE-2026-55124 Microsoft Office WordRemote Code Execution5.5 0.0060 Exploitation Less Likely
Routine CVE-2026-55142 Microsoft Office WordInformation Disclosure5.5 0.0060 Exploitation Less Likely
Showing 1 to 12 of 12 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.