Microsoft Patches 200 Vulnerabilities
Source SecurityWeek
Mentioned vulnerabilities
Rated Critical by SecurityWeek
Data as of 9 Jun 2026, 19:10 UTC
What to do
AI-suggested
Microsoft has released official patches addressing all the vulnerabilities described, including the three publicly disclosed with higher exploitation likelihood. Organizations should apply the June 2026 Patch Tuesday updates promptly to mitigate these risks. Since this is not a cloud service, remediation depends on applying these patches. No additional vendor advisories indicate alternative mitigations or that no action is required.
Description
Microsoft's June 2026 Patch Tuesday updates address approximately 200 vulnerabilities across multiple products including Windows, Azure, Office, Outlook, Exchange, and AI tools. Among these, three vulnerabilities were publicly disclosed prior to patching and have an 'exploitation more likely' assessment. These include a Windows denial-of-service issue related to HTTP2/Bomb (CVE-2026-49160), a Windows BitLocker security bypass allowing physical access to encrypted data (CVE-2026-50507), and a Windows privilege escalation vulnerability in the Collaborative Translation Framework (CVE-2026-45586). Nearly 40 of the patched vulnerabilities are rated critical, with potential impacts such as remote code execution, privilege escalation, and information disclosure. No exploitation in the wild has been reported for these latest fixes.