Microsoft · Security update · August 11, 2026

KB5002901: August 2026 security update

KB5002901, released August 11, 2026, fixes 17 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
17
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0097
61st percentile

Priority of the 17 CVEs

Patch now 0 Urgent 2 High 4 Routine 11

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-63525 Microsoft Office Word Remote Code Execution 7.8 0.0047 Exploitation Less Likely
Urgent CVE-2026-64907 Microsoft Office Word Remote Code Execution 7.8 0.0047 Exploitation Less Likely
High CVE-2026-63527 Microsoft Office Word Remote Code Execution 7.8 0.0047 Exploitation Less Likely
High CVE-2026-64905 Microsoft Office Word Remote Code Execution 7.8 0.0047 Exploitation Less Likely
High CVE-2026-64915 Microsoft Office Word Remote Code Execution 7.8 0.0047 Exploitation Less Likely
High CVE-2026-70311 Microsoft Office Word Remote Code Execution 7.8 0.0047 Exploitation Less Likely
Routine CVE-2026-70105 Microsoft Office Word Information Disclosure 6.5 0.0097 Exploitation Less Likely
Routine CVE-2026-63528 Microsoft Office Word Information Disclosure 5.5 0.0054 Exploitation Unlikely
Routine CVE-2026-63530 Microsoft Office Word Information Disclosure 5.5 0.0054 Exploitation Less Likely
Routine CVE-2026-63531 Microsoft Office Word Information Disclosure 5.5 0.0054 Exploitation Less Likely
Routine CVE-2026-64917 Microsoft Office Word Information Disclosure 5.5 0.0054 Exploitation Less Likely
Routine CVE-2026-70318 Microsoft Office Excel Information Disclosure 5.5 0.0054 Exploitation Less Likely
Routine CVE-2026-63521 Microsoft Office Word Information Disclosure 5.5 0.0044 Exploitation Unlikely
Routine CVE-2026-66806 Microsoft Office Word Information Disclosure 5.5 0.0044 Exploitation Less Likely
Routine CVE-2026-66809 Microsoft Office Information Disclosure 5.5 0.0044 Exploitation Less Likely
Routine CVE-2026-66810 Microsoft Office Word Information Disclosure 5.5 0.0044 Exploitation Less Likely
Routine CVE-2026-70310 Microsoft Office Word Information Disclosure 5.5 0.0044 Exploitation Less Likely
Showing 1 to 17 of 17 1