KB5002858
Security update fixing 6 CVEs
0Windows versions
6CVEs fixed · 4 critical
0Exploited or in CISA KEV
0Open known issues affecting it
—Restart required (per MSRC)
Known issues in this update
Windows release healthNo known issues listed
Windows release health lists no issues from this KB or the update it builds on.
Issues this update resolves
No resolved issues listed
Windows release health names no issues fixed by this KB.
Security fixes
6 Microsoft CVEs · most urgent first| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status |
|---|---|---|---|---|---|---|
| CVE-2026-40361 | Microsoft Outlook and Word Remote Code Execution VulnerabilityMicrosoft Office | Critical | 8.4 | 0.4% | Remote Code Execution | Revised 2 Jun |
| CVE-2026-40364 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | Critical | 8.4 | 0.4% | Remote Code Execution | |
| CVE-2026-40366 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | Critical | 8.4 | 0.4% | Remote Code Execution | |
| CVE-2026-40367 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | Critical | 8.4 | 0.4% | Remote Code Execution | Revised 20 May |
| CVE-2026-35440 | Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 5.5 | 0.5% | Information Disclosure | |
| CVE-2026-40421 | Microsoft Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 4.3 | 0.7% | Information Disclosure |