Patch tracker / KB5002903
KB5002903: Office Online Server Security Update (August 2026)
KB5002903 is a High security update for Office Online Server, released 2026-08-11. It closes 25 CVEs with a maximum CVSS of 8.8. It is the 28th largest of the 71 updates Microsoft shipped that month, by CVEs closed.
Update summary
Fixes 25 CVEs. Most severe CVSS 8.8 (High). EPSS exploit probability up to <1%. Among the lower half of tracked Microsoft updates by EPSS exploit probability.
We checked Microsoft's support article for KB5002903 on 2026-08-11 and it lists no known issues. Read the article before broad deployment; Microsoft adds issues as reports come in, and we re-check on every refresh.
Senserva AI Opinion and rich prompt for KB5002903
Copy this prompt into Claude, ChatGPT, or Copilot. The facts are included, sourced from this page.
Full tracking and change history for KB5002903
- Released
- 2026-08-11
- Last changed
- 2026-08-12
- Changes tracked
- 2
Senserva began recording day-to-day change history on 2026-07-07, and refreshes it several times a day. Release dates are historical where Microsoft publishes them; revision history is tracked from that date forward, so it does not include changes made before then.
Check if KB5002903 is installed
Elevated PowerShell. No output means it is not installed.
CVEs fixed by this update
Sorted exploited-first, then by CVSS. Every CVE links to its Senserva page with the full risk facts, references, and a ready-to-paste AI prompt.
| CVE | Severity | CVSS | EPSS | Exploited |
|---|---|---|---|---|
| CVE-2026-65807 | High | 8.8 | <1% | No |
| CVE-2026-68793 | High | 7.8 | <1% | No |
| CVE-2026-68794 | High | 7.8 | <1% | No |
| CVE-2026-68795 | High | 7.8 | <1% | No |
| CVE-2026-68796 | High | 7.8 | <1% | No |
| CVE-2026-68800 | High | 7.8 | <1% | No |
| CVE-2026-68801 | High | 7.8 | <1% | No |
| CVE-2026-68803 | High | 7.8 | <1% | No |
| CVE-2026-68804 | High | 7.8 | <1% | No |
| CVE-2026-68805 | High | 7.8 | <1% | No |
| CVE-2026-68806 | High | 7.8 | <1% | No |
| CVE-2026-68807 | High | 7.8 | <1% | No |
| CVE-2026-68810 | High | 7.8 | <1% | No |
| CVE-2026-68811 | High | 7.8 | <1% | No |
| CVE-2026-68812 | High | 7.8 | <1% | No |
| CVE-2026-68814 | High | 7.8 | <1% | No |
| CVE-2026-68815 | High | 7.8 | <1% | No |
| CVE-2026-68816 | High | 7.8 | <1% | No |
| CVE-2026-68817 | High | 7.8 | <1% | No |
| CVE-2026-70327 | Medium | 6.5 | <1% | No |
| CVE-2026-70328 | Medium | 6.5 | <1% | No |
| CVE-2026-68797 | Medium | 5.5 | <1% | No |
| CVE-2026-68799 | Medium | 5.5 | <1% | No |
| CVE-2026-68802 | Medium | 5.5 | <1% | No |
| CVE-2026-68808 | Medium | 5.5 | <1% | No |
Scope and sources
- Affected products
- Also released in August 2026
KB5002882
39 CVEs · Critical · exploitedKB5002883
40 CVEs · Critical · exploitedKB5002891
40 CVEs · Critical · exploitedKB5120228
212 CVEs · Critical · exploitedKB5120229
194 CVEs · Critical · exploitedKB5120233
214 CVEs · Critical · exploitedKB5120238
182 CVEs · Critical · exploitedKB5120240
170 CVEs · Critical · exploitedThe full month, summarized: Microsoft Patch Tuesday.
- Authoritative references
See this and every Microsoft update ranked by real-world risk on the Microsoft Patch Tracker.