KB5002904: what it fixes and who gets it

KB5002904 is a security update from Microsoft's September 2026 release for Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition).

Microsoft data read
30CVEs fixed
6rated Critical
0already exploited
Norestart required

Should you install it?

Yes. It closes holes Microsoft rates Critical, the most serious rating it uses. Windows Update installs it automatically on supported home PCs.

If the installation fails or the PC misbehaves afterwards, note the exact error code first: the fix depends on it. Our update troubleshooting guides are linked on this page.

Security fixes in KB5002904

CVETypeCVSSSeverity
CVE-2026-81948Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-81949Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-81950Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-81951Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-81953Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-81959Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Critical
CVE-2026-78518Microsoft Office Excel Remote Code Execution VulnerabilityRemote Code Execution8.8Important
CVE-2026-81386Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81388Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81396Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81397Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81398Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81947Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81954Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81956Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81957Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81960Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.8Important
CVE-2026-81389Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution7.0Important
CVE-2026-81387Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81390Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81391Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81392Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81393Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81394Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81395Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81399Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81400Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81401Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-81958Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important
CVE-2026-85875Microsoft Office Excel Information Disclosure VulnerabilityInformation Disclosure5.5Important

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

4,322 members already hereThey read, write, comment and vote. 0 verified · 31 joined this year

Cookies

We use essential cookies to run the platform. Analytics and marketing cookies are only turned on once you consent — you can change your choice at any time.