KB5002863
Security update fixing 9 CVEs
0Windows versions
9CVEs fixed · 2 critical
1Exploited or in CISA KEV
0Open known issues affecting it
—Restart required (per MSRC)
Known issues in this update
Windows release healthNo known issues listed
Windows release health lists no issues from this KB or the update it builds on.
Issues this update resolves
No resolved issues listed
Windows release health names no issues fixed by this KB.
Security fixes
9 Microsoft CVEs · most urgent first| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status |
|---|---|---|---|---|---|---|
| CVE-2026-45659 | Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint | Important | 8.8 | 2.7% | Remote Code Execution | CISA KEV · due 4 JulRevised 26 May |
| CVE-2026-40365 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | Critical | 8.8 | 1.1% | Remote Code Execution | |
| CVE-2026-40367 | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word | Critical | 8.4 | 0.4% | Remote Code Execution | Revised 20 May |
| CVE-2026-33110 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | Important | 8.8 | 2.3% | Remote Code Execution | |
| CVE-2026-33112 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | Important | 8.8 | 2.3% | Remote Code Execution | Revised 27 May |
| CVE-2026-35439 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | Important | 8.8 | 2.3% | Remote Code Execution | |
| CVE-2026-40357 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | Important | 8.8 | 2.3% | Remote Code Execution | |
| CVE-2026-40368 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | Important | 8.0 | 2.1% | Remote Code Execution | |
| CVE-2026-47294 | Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft Office SharePoint | Important | 8.0 | 1.2% | Remote Code Execution | Revised 10 Jun |