Microsoft · Security update · September 8, 2026
KB5002923: September 2026 security update
KB5002923, released September 8, 2026, fixes 30 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
30
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0097
62nd percentile
Priority of the 30 CVEs
Patch now 0
Urgent 3
High 16
Routine 11
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-78509 | Microsoft Office Outlook | Remote Code Execution | 9.8 | 0.0097 | Exploitation Less Likely |
| Urgent | CVE-2026-78520 | Microsoft Office Outlook | Remote Code Execution | 6.5 | 0.0092 | Exploitation Less Likely |
| Urgent | CVE-2026-78525 | Microsoft Office Outlook | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-69556 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-69671 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-69686 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-69722 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-69759 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-69764 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Unlikely |
| High | CVE-2026-72972 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-72973 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-77901 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-78504 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-78511 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-78514 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-78517 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-78521 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-80080 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2026-80085 | Microsoft Office Word | Remote Code Execution | 8.8 | 0.0082 | Exploitation Less Likely |
| Routine | CVE-2026-69719 | Microsoft Office Word | Information Disclosure | 6.5 | 0.0092 | Exploitation Unlikely |
| Routine | CVE-2026-77911 | Microsoft Office Word | Information Disclosure | 6.5 | 0.0092 | Exploitation Less Likely |
| Routine | CVE-2026-78502 | Microsoft Office Word | Information Disclosure | 6.5 | 0.0092 | Exploitation Less Likely |
| Routine | CVE-2026-78503 | Microsoft Office Word | Information Disclosure | 6.5 | 0.0092 | Exploitation Less Likely |
| Routine | CVE-2026-78522 | Microsoft Office Word | Information Disclosure | 6.5 | 0.0092 | Exploitation Less Likely |
| Routine | CVE-2026-80079 | Microsoft Office Word | Information Disclosure | 6.5 | 0.0092 | Exploitation Less Likely |
Showing 1 to 25 of 30
1Next