Microsoft · Security update · June 9, 2026

KB5002881: June 2026 security update

KB5002881, released June 9, 2026, fixes 8 CVEs in Microsoft SharePoint Enterprise Server 2016. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
8
2 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0047
40th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 2 High 4 Routine 2

Applies to

Product
Microsoft SharePoint Enterprise Server 2016

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-45456 Microsoft Office Remote Code Execution 8.4 0.0044 Exploitation Less Likely
Urgent CVE-2026-45458 Microsoft Office Remote Code Execution 8.4 0.0044 Exploitation Less Likely
High CVE-2026-44819 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
High CVE-2026-44824 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
High CVE-2026-45471 Microsoft Office Word Remote Code Execution 7.8 0.0046 Exploitation Less Likely
High CVE-2026-45475 Microsoft Office Remote Code Execution 7.8 0.0046 Exploitation Less Likely
Routine CVE-2026-44821 Microsoft Office Information Disclosure 5.5 0.0047 Exploitation Less Likely
Routine CVE-2026-45485 Microsoft Office Information Disclosure 3.3 0.0044 Exploitation Less Likely
Showing 1 to 8 of 8 1