Feed›Vulnerability›Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaw...
VulnerabilityBleeping Computer
9.8 — CRITICAL

Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws

📅 9 June 2026 at 17:57 UTC📰 Bleeping ComputerView original source ↗
Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws and three publicly disclosed zero-day vulnerabilities. [...]

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

Microsoft released a June 2026 Patch Tuesday, addressing 200 flaws, including three zero-day vulnerabilities and several remote code execution vulnerabilities in various products, posing significant risks to affected systems.

⚙️Technical Details
💥Impact Assessment
Severity: High
Who Is at Risk
Organizations using affected Microsoft products, particularly those in finance, healthcare, and government sectors
🛡️Recommended Actions
1Apply all available patches for affected products as soon as possible
2Implement additional security controls, such as intrusion detection systems and network segmentation
3Conduct regular vulnerability assessments and penetration testing to identify potential weaknesses
📦Affected Products
.NETActive Directory Domain ServicesASP.NET CoreAzure Stack EdgeFunction Discovery Service (fdwsd.dll)GitHub Copilot and Visual Studio CodeHTTP/2Linux MANA DriverMicrosoft Azure Attestation service and Device Health Attestation ServiceMicrosoft Azure Kubernetes ServiceMicrosoft BingMicrosoft Defender for EndpointMicrosoft Dynamics 365 (on-premises)Microsoft Exchange ServerMicrosoft Graphics ComponentMicrosoft KinectMicrosoft Live Share Canvas SDKMicrosoft Office
🔐NVD Verified DataVERIFIED
CVE-2026-45491 ↗CVSS 6.2 — MEDIUM
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-59
CVE-2026-45490 ↗CVSS 7.8 — HIGH
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-285
CVE-2026-45648 ↗CVSS 8.8 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121
CVE-2026-45591 ↗CVSS 7.5 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
CVE-2026-47643 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-73

Read the full article

This is a curated summary. The complete article is available at Bleeping Computer.

Read on Bleeping Computer ↗
← Back to feed