Microsoft · Security update · June 9, 2026

KB5002880: June 2026 security update

KB5002880, released June 9, 2026, fixes 30 CVEs in Microsoft SharePoint Enterprise Server 2016. One of them is being exploited (CVE-2026-58644); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
30
3 rated Critical
Exploited
1
CVE-2026-58644
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.3354
98th percentile

Priority of the 30 CVEs

Patch now 1 Urgent 3 High 6 Routine 20

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-58644 Microsoft Office SharePoint Remote Code Execution 9.8 0.1587 KEVExploited
Urgent CVE-2026-45481 Microsoft Office SharePoint Spoofing 7.3 0.0063 More likely
Urgent CVE-2026-45456 Microsoft Office Remote Code Execution 8.4 0.0044 Exploitation Less Likely
Urgent CVE-2026-45458 Microsoft Office Remote Code Execution 8.4 0.0044 Exploitation Less Likely
High CVE-2026-45484 Microsoft Office SharePoint Elevation of Privilege 8.8 0.3354 Exploitation Less Likely
High CVE-2026-47298 Microsoft Office SharePoint Remote Code Execution 8.0 0.0062 Exploitation Less Likely
High CVE-2026-44819 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
High CVE-2026-44824 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
High CVE-2026-45471 Microsoft Office Word Remote Code Execution 7.8 0.0046 Exploitation Less Likely
High CVE-2026-45475 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
Routine CVE-2026-45454 Microsoft Office SharePoint Remote Code Execution 6.5 0.0163 Exploitation Less Likely
Routine CVE-2026-48560 Microsoft Office SharePoint Spoofing 5.4 0.0086 Exploitation Less Likely
Routine CVE-2026-33113 Microsoft Office SharePoint Spoofing 5.4 0.0048 Exploitation Less Likely
Routine CVE-2026-45453 Microsoft Office SharePoint Spoofing 5.4 0.0047 Exploitation Less Likely
Routine CVE-2026-45464 Microsoft Office SharePoint Spoofing 5.4 0.0047 Exploitation Less Likely
Routine CVE-2026-45465 Microsoft Office SharePoint Spoofing 5.4 0.0047 Exploitation Less Likely
Routine CVE-2026-47636 Microsoft Office SharePoint Spoofing 5.4 0.0047 Exploitation Less Likely
Routine CVE-2026-47639 Microsoft Office SharePoint Spoofing 5.4 0.0047 Exploitation Unlikely
Routine CVE-2026-44821 Microsoft Office Information Disclosure 5.5 0.0047 Exploitation Less Likely
Routine CVE-2026-45462 Microsoft Office SharePoint Spoofing 4.6 0.0046 Exploitation Less Likely
Routine CVE-2026-45467 Microsoft Office SharePoint Spoofing 4.6 0.0046 Exploitation Less Likely
Routine CVE-2026-45468 Microsoft Office SharePoint Spoofing 4.6 0.0046 Exploitation Less Likely
Routine CVE-2026-45479 Microsoft Office SharePoint Spoofing 4.6 0.0046 Exploitation Less Likely
Routine CVE-2026-45483 Microsoft Office Project Spoofing 4.6 0.0046 Exploitation Less Likely
Routine CVE-2026-47637 Microsoft Office SharePoint Spoofing 4.6 0.0046 Exploitation Less Likely
Showing 1 to 25 of 30 1Next