Patch tracker / KB5002820
KB5002820
Microsoft security update released 2025-12-09. Fixes 6 CVEs.
High
Download KB5002820
Get the official update for KB5002820. The download and file size for each supported product are on the Microsoft Update Catalog page.
Update summary
Released
2025-12-09
CVEs fixed
6
Max CVSS
7.8
Severity
High
Exploitation and severity
Fixes 6 CVEs. Most severe CVSS 7.8 (High). EPSS exploit probability up to <1%.
Among the lower half of tracked Microsoft updates by EPSS exploit probability.
What to do
Moderate priority: schedule it in your normal patch cycle. Senserva flags whether KB5002820 is missing on your devices.
CVEs fixed by this update
Affected products
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Office Online Server
See this and every Microsoft update ranked by real-world risk on the Microsoft Patch Tracker.