Microsoft · Security update · October 13, 2026

KB5002928: October 2026 security update

KB5002928, released October 13, 2026, fixes 44 CVEs in Office Online Server. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
44
13 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.0097
62nd percentile

Priority of the 44 CVEs

Patch now 0 Urgent 13 High 28 Routine 3

Applies to

Product
Office Online Server

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-105718 Microsoft Office ExcelRemote Code Execution8.8 0.0096 Exploitation Less Likely
Urgent CVE-2026-100210 Microsoft Office ExcelRemote Code Execution8.8 0.0093 Exploitation Less Likely
Urgent CVE-2026-97742 Microsoft Office ExcelRemote Code Execution8.8 0.0093 Exploitation Less Likely
Urgent CVE-2026-97756 Microsoft Office ExcelRemote Code Execution8.8 0.0091 Exploitation Less Likely
Urgent CVE-2026-97739 Microsoft Office ExcelRemote Code Execution8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-97765 Microsoft Office ExcelRemote Code Execution8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-97776 Microsoft Office ExcelRemote Code Execution8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-97780 Microsoft Office ExcelRemote Code Execution8.8 0.0082 Exploitation Less Likely
Urgent CVE-2026-97753 Microsoft Office ExcelRemote Code Execution8.8 0.0080 Exploitation Less Likely
Urgent CVE-2026-97755 Microsoft Office ExcelRemote Code Execution8.8 0.0080 Exploitation Less Likely
Urgent CVE-2026-97767 Microsoft Office ExcelRemote Code Execution8.8 0.0060 Exploitation Less Likely
Urgent CVE-2026-97778 Microsoft Office ExcelRemote Code Execution8.8 0.0060 Exploitation Less Likely
Urgent CVE-2026-97758 Microsoft Office ExcelRemote Code Execution8.8 0.0059 Exploitation Less Likely
High CVE-2026-100212 Microsoft Office ExcelRemote Code Execution8.8 0.0091 Exploitation Less Likely
High CVE-2026-97769 Microsoft Office ExcelRemote Code Execution8.8 0.0090 Exploitation Less Likely
High CVE-2026-97004 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97007 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97008 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97738 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97746 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97748 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97757 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97762 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97763 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
High CVE-2026-97768 Microsoft Office ExcelRemote Code Execution8.8 0.0086 Exploitation Less Likely
Showing 1 to 25 of 44 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.