Microsoft · Security update · September 8, 2026
KB5002904: September 2026 security update
KB5002904, released September 8, 2026, fixes 30 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
30
6 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0086
58th percentile
Priority of the 30 CVEs
Patch now 0
Urgent 6
High 12
Routine 12
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-81948 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| Urgent | CVE-2026-81949 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Unlikely |
| Urgent | CVE-2026-81950 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| Urgent | CVE-2026-81951 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| Urgent | CVE-2026-81953 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| Urgent | CVE-2026-81959 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-78518 | Microsoft Office Excel | Remote Code Execution | 8.8 | 0.0086 | Exploitation Less Likely |
| High | CVE-2026-81386 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-81388 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Unlikely |
| High | CVE-2026-81396 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Unlikely |
| High | CVE-2026-81397 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-81398 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-81947 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-81954 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-81956 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-81957 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-81960 | Microsoft Office Excel | Remote Code Execution | 7.8 | 0.0047 | Exploitation Less Likely |
| High | CVE-2026-81389 | Microsoft Office Excel | Remote Code Execution | 7.0 | 0.0037 | Exploitation Less Likely |
| Routine | CVE-2026-81387 | Microsoft Office Excel | Information Disclosure | 5.5 | 0.0055 | Exploitation Less Likely |
| Routine | CVE-2026-81394 | Microsoft Office Excel | Information Disclosure | 5.5 | 0.0055 | Exploitation Less Likely |
| Routine | CVE-2026-81390 | Microsoft Office Excel | Information Disclosure | 5.5 | 0.0054 | Exploitation Less Likely |
| Routine | CVE-2026-81391 | Microsoft Office Excel | Information Disclosure | 5.5 | 0.0054 | Exploitation Less Likely |
| Routine | CVE-2026-81392 | Microsoft Office Excel | Information Disclosure | 5.5 | 0.0054 | Exploitation Less Likely |
| Routine | CVE-2026-81393 | Microsoft Office Excel | Information Disclosure | 5.5 | 0.0054 | Exploitation Less Likely |
| Routine | CVE-2026-81395 | Microsoft Office Excel | Information Disclosure | 5.5 | 0.0054 | Exploitation Unlikely |
Showing 1 to 25 of 30
1Next