Microsoft · Security update · September 8, 2026
KB5002920: September 2026 security update
KB5002920, released September 8, 2026, fixes 6 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
6
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0097
61st percentile
Priority of the 6 CVEs
Patch now 0
Urgent 3
High 0
Routine 3
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-69678 | Microsoft Office PowerPoint | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-69767 | Microsoft Office PowerPoint | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| Urgent | CVE-2026-69797 | Microsoft Office PowerPoint | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| Routine | CVE-2026-72977 | Microsoft Office PowerPoint | Information Disclosure | 6.5 | 0.0097 | Exploitation Less Likely |
| Routine | CVE-2026-72975 | Microsoft Office PowerPoint | Information Disclosure | 6.5 | 0.0092 | Exploitation Less Likely |
| Routine | CVE-2026-78513 | Microsoft Office PowerPoint | Information Disclosure | 5.5 | 0.0054 | Exploitation Less Likely |
Showing 1 to 6 of 6
1