Microsoft · Security update · June 9, 2026

KB5002878: June 2026 security update

KB5002878, released June 9, 2026, fixes 9 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
9
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0047
40th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 4 High 3 Routine 2

Applies to

Product
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-45461 Microsoft Office Remote Code Execution 8.4 0.0039 Exploitation Less Likely
Urgent CVE-2026-45463 Microsoft Office Remote Code Execution 8.4 0.0036 Exploitation Less Likely
Urgent CVE-2026-45472 Microsoft Office Remote Code Execution 8.4 0.0036 Exploitation Less Likely
Urgent CVE-2026-45474 Microsoft Office Remote Code Execution 8.4 0.0036 Exploitation Less Likely
High CVE-2026-44819 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
High CVE-2026-44824 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
High CVE-2026-45475 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
Routine CVE-2026-44821 Microsoft Office Information Disclosure 5.5 0.0047 Exploitation Less Likely
Routine CVE-2026-45485 Microsoft Office Information Disclosure 3.3 0.0044 Exploitation Less Likely
Showing 1 to 9 of 9 1