KB5002901: what it fixes and who gets it

KB5002901 is a security update from Microsoft's August 2026 release for Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition).

Microsoft data read
17CVEs fixed
2rated Critical
0already exploited
Norestart required

Should you install it?

Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5002901

CVETypeCVSSSeverity
CVE-2026-63525Microsoft Office Word Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-64907Microsoft Office Word Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-63527Microsoft Office Word Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-64905Microsoft Office Word Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-64915Microsoft Office Word Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-70311Microsoft Office Word Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-70105Microsoft Word Information Disclosure VulnerabilityInformation Disclosure6.5Important
CVE-2026-63521Microsoft Office Word Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-63528Microsoft Office Word Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-63530Microsoft Office Word Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-63531Microsoft Office Word Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-64917Microsoft Office Word Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-66806Microsoft Office Word Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-66809Microsoft Office Graphics Component Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-66810Microsoft Office Word Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-70310Microsoft Word Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-70318Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year

Cookies

We use essential cookies to run the platform. Analytics and marketing cookies are only turned on once you consent — you can change your choice at any time.