Microsoft · Security update · September 8, 2026

KB5002923: September 2026 security update

KB5002923, released September 8, 2026, fixes 30 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
30
3 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0097
62nd percentile

Priority of the 30 CVEs

Patch now 0 Urgent 3 High 16 Routine 11

Applies to

Product
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-78509 Microsoft Office OutlookRemote Code Execution9.8 0.0097 Exploitation Less Likely
Urgent CVE-2026-78520 Microsoft Office OutlookRemote Code Execution6.5 0.0092 Exploitation Less Likely
Urgent CVE-2026-78525 Microsoft Office OutlookRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-69556 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-69671 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-69686 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-69722 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-69759 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-69764 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Unlikely
High CVE-2026-72972 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-72973 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-77901 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-78504 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-78511 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-78514 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-78517 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-78521 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-80080 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
High CVE-2026-80085 Microsoft Office WordRemote Code Execution8.8 0.0082 Exploitation Less Likely
Routine CVE-2026-69719 Microsoft Office WordInformation Disclosure6.5 0.0092 Exploitation Unlikely
Routine CVE-2026-77911 Microsoft Office WordInformation Disclosure6.5 0.0092 Exploitation Less Likely
Routine CVE-2026-78502 Microsoft Office WordInformation Disclosure6.5 0.0092 Exploitation Less Likely
Routine CVE-2026-78503 Microsoft Office WordInformation Disclosure6.5 0.0092 Exploitation Less Likely
Routine CVE-2026-78522 Microsoft Office WordInformation Disclosure6.5 0.0092 Exploitation Less Likely
Routine CVE-2026-80079 Microsoft Office WordInformation Disclosure6.5 0.0092 Exploitation Less Likely
Showing 1 to 25 of 30 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.