Microsoft · Security update · June 9, 2026

KB5094006: June 2026 security update

KB5094006, released June 9, 2026, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.0029

21st percentile

Applies to

Product
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
High	CVE-2026-45592	Windows Internet (wininet.dll)	Elevation of Privilege	7.8	0.0029	Exploitation Unlikely

Released the same day

KB5002852
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002873
Microsoft SharePoint Server Subscription Edition
KB5002874
Microsoft SharePoint Server 2019
KB5002875
Office Online Server
KB5002876
Microsoft SharePoint Server 2019
KB5002877
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5002878
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002879
Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)
KB5002880
Microsoft SharePoint Enterprise Server 2016
KB5002881
Microsoft SharePoint Enterprise Server 2016
KB5093998
Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems and 1 more
KB5094041
Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Vendor advisory

https://support.microsoft.com/help/5094006

Our write-up

June 2026 Patch Tuesday: 200 CVEs, Three Public Disclosures, and a New Record

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5094006">KB5094006 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.