Patch tracker / KB5002914
KB5002914: Microsoft Excel 2016 Security Update (September 2026)
KB5002914 is a High security update for Microsoft Excel 2016, released 2026-09-08. It closes 30 CVEs with a maximum CVSS of 8.8. It is the 20th largest of the 69 updates Microsoft shipped that month, by CVEs closed.
Update summary
Fixes 30 CVEs. Most severe CVSS 8.8 (High). EPSS exploit probability up to <1%. Among the lower half of tracked Microsoft updates by EPSS exploit probability.
Microsoft documents 1 known issue with this update.
- After this update is installed, paste operations might fail silently. When this issue occurs, the source remains selected and the destination remains...
Senserva AI Opinion and rich prompt for KB5002914
Copy this prompt into Claude, ChatGPT, or Copilot. The facts are included, sourced from this page.
Full tracking and change history for KB5002914
- Released
- 2026-09-08
- Last changed
- 2026-09-26
- Changes tracked
- 4
Senserva began recording day-to-day change history on 2026-07-07, and refreshes it several times a day. Release dates are historical where Microsoft publishes them; revision history is tracked from that date forward, so it does not include changes made before then.
Check if KB5002914 is installed
Elevated PowerShell. No output means it is not installed.
Known issues, from Microsoft
Quoted from Microsoft's support article for KB5002914 (checked 2026-10-06). Verify against the article before acting.
After this update is installed, paste operations might fail silently. When this issue occurs, the source remains selected and the destination remains unchanged. Users receive no indication that the paste operation failed, such as a beep or error message.
This issue is fixed in the September 16, 2026, update for Excel 2016 (KB5002665) .
CVEs fixed by this update
Sorted exploited-first, then by CVSS. Every CVE links to its Senserva page with the full risk facts, references, and a ready-to-paste AI prompt.
| CVE | Severity | CVSS | EPSS | Exploited |
|---|---|---|---|---|
| CVE-2026-78518 | High | 8.8 | <1% | No |
| CVE-2026-81387 | High | 8.8 | <1% | No |
| CVE-2026-81390 | High | 8.8 | <1% | No |
| CVE-2026-81391 | High | 8.8 | <1% | No |
| CVE-2026-81392 | High | 8.8 | <1% | No |
| CVE-2026-81393 | High | 8.8 | <1% | No |
| CVE-2026-81394 | High | 8.8 | <1% | No |
| CVE-2026-81395 | High | 8.8 | <1% | No |
| CVE-2026-81399 | High | 8.8 | <1% | No |
| CVE-2026-81400 | High | 8.8 | <1% | No |
| CVE-2026-81401 | High | 8.8 | <1% | No |
| CVE-2026-81958 | High | 8.8 | <1% | No |
| CVE-2026-85875 | High | 8.8 | <1% | No |
| CVE-2026-81386 | High | 7.8 | <1% | No |
| CVE-2026-81388 | High | 7.8 | <1% | No |
| CVE-2026-81396 | High | 7.8 | <1% | No |
| CVE-2026-81397 | High | 7.8 | <1% | No |
| CVE-2026-81398 | High | 7.8 | <1% | No |
| CVE-2026-81947 | High | 7.8 | <1% | No |
| CVE-2026-81948 | High | 7.8 | <1% | No |
| CVE-2026-81949 | High | 7.8 | <1% | No |
| CVE-2026-81950 | High | 7.8 | <1% | No |
| CVE-2026-81951 | High | 7.8 | <1% | No |
| CVE-2026-81953 | High | 7.8 | <1% | No |
| CVE-2026-81954 | High | 7.8 | <1% | No |
| CVE-2026-81956 | High | 7.8 | <1% | No |
| CVE-2026-81957 | High | 7.8 | <1% | No |
| CVE-2026-81959 | High | 7.8 | <1% | No |
| CVE-2026-81960 | High | 7.8 | <1% | No |
| CVE-2026-81389 | High | 7.0 | <1% | No |
Scope and sources
- Affected products
- Also released in September 2026
KB5122871
679 CVEs · Critical · exploitedKB5122876
616 CVEs · Critical · exploitedKB5122878
568 CVEs · Critical · exploitedKB5122880
602 CVEs · Critical · exploitedKB5122882
641 CVEs · Critical · exploitedKB5123065
393 CVEs · Critical · exploitedKB5123066
418 CVEs · Critical · exploitedKB5123099
555 CVEs · Critical · exploitedThe full month, summarized: Microsoft Patch Tuesday.
- Authoritative references
See this and every Microsoft update ranked by real-world risk on the Microsoft Patch Tracker.