Microsoft · Security update · November 10, 2026

KB5002946: November 2026 security update

KB5002946, released November 10, 2026, fixes 56 CVEs in Office Online Server. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
56
11 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
n/a

Priority of the 56 CVEs

Patch now 0 Urgent 11 High 40 Routine 5

Applies to

Product
Office Online Server

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-118292 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-118296 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-118297 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-118701 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-118711 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-118713 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-118730 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-120786 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-120788 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-120789 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Urgent CVE-2026-124170 Microsoft Office ExcelRemote Code Execution7.5 n/a Exploitation Less Likely
High CVE-2026-116927 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118293 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118294 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118295 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118298 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118299 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118302 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118700 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118703 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118704 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118705 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118706 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118707 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
High CVE-2026-118708 Microsoft Office ExcelRemote Code Execution8.8 n/a Exploitation Less Likely
Showing 1 to 25 of 56 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.