Microsoft · Security update · August 11, 2026

KB5002897: August 2026 security update

KB5002897, released August 11, 2026, fixes 12 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
12
5 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0054
45th percentile

Priority of the 12 CVEs

Patch now 0 Urgent 5 High 2 Routine 5

Applies to

Product
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-63513 Microsoft Office Remote Code Execution 7.8 0.0047 Exploitation Less Likely
Urgent CVE-2026-63526 Microsoft Office Remote Code Execution 7.8 0.0047 Exploitation Less Likely
Urgent CVE-2026-63532 Microsoft Office Remote Code Execution 7.8 0.0047 Exploitation Less Likely
Urgent CVE-2026-64903 Microsoft Office Remote Code Execution 7.8 0.0047 Exploitation Less Likely
Urgent CVE-2026-64909 Microsoft Office Remote Code Execution 7.8 0.0047 Exploitation Less Likely
High CVE-2026-63533 Microsoft Office Remote Code Execution 7.8 0.0047 Exploitation Less Likely
High CVE-2026-65661 Microsoft Office Remote Code Execution 7.8 0.0047 Exploitation Unlikely
Routine CVE-2026-63517 Microsoft Office Information Disclosure 5.5 0.0054 Exploitation Less Likely
Routine CVE-2026-63524 Microsoft Office Information Disclosure 5.5 0.0054 Exploitation Less Likely
Routine CVE-2026-63529 Microsoft Office Information Disclosure 5.5 0.0054 Exploitation Less Likely
Routine CVE-2026-64899 Microsoft Office Information Disclosure 5.5 0.0054 Exploitation Less Likely
Routine CVE-2026-70317 Microsoft Office Information Disclosure 5.5 0.0044 Exploitation Less Likely
Showing 1 to 12 of 12 1