Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Microsoft June 2026 Patch Tuesday record 206-vulnerability update

Security Patch Release
First reported
Last updated
Happening score
H score 55
1 unique sources, 1 articles

Summary

Hide ▲

Microsoft shipped a record 206-vulnerability update for its software portfolio, including three publicly disclosed flaws. The release spans Critical and Important issues across Windows and related components, making it a large enterprise patching event. It also includes fixes for Chromium-related code in Edge and adds MaxHeadersCount mitigation for HTTP/2 and HTTP/3 header abuse.

Related Happenings

Microsoft June 2026 Patch Tuesday GreenPlasma and YellowKey fixes

Security Patch Release
H score15 First: 10.06.2026 02:11 Last: 10.06.2026 02:11 Sources 1

About this happening: **Microsoft** released **June 2026 Patch Tuesday** updates that fixed the **GreenPlasma** and **YellowKey** flaws, closing two previously disclosed issues in the Windows ecosystem...

Open Happening

Microsoft June 2026 Patch Tuesday record security update bundle

Security Patch Release
H score36 First: 10.06.2026 01:07 Last: 10.06.2026 01:07 Sources 1

About this happening: **Microsoft** released a **record Patch Tuesday bundle** for **June 2026** that patches **nearly 200 security holes** across **Windows operating systems and supported software**,...

Open Happening

Microsoft June 2026 Patch Tuesday (200 flaws, 3 zero-days)

Security Patch Release
H score37 First: 09.06.2026 20:57 Last: 09.06.2026 20:57 Sources 1

About this happening: **Microsoft** released its **June 2026 Patch Tuesday**, delivering security updates for **200 flaws** and **three publicly disclosed zero-days** across Windows and related compone...

Open Happening

Microsoft security patch release for CVE-2026-41091 and CVE-2026-45498

Security Patch Release
H score44 First: 21.05.2026 10:49 Last: 21.05.2026 10:49 Sources 1

About this happening: Microsoft rolled out security updates for Defender and related malware protection components to address two zero-days: CVE-2026-41091 and CVE-2026-45498. The fixes cover affected...

Latest development: 21.05.2026 12:52

Microsoft released patches for Microsoft Defender Antimalware Platform version 4.18.26040.7 to address CVE-2026-41091, a link-following privilege-escalation flaw that can let an authorized attacker elevate privileges locally to System, and CVE-2026-45498, a denial-of-service flaw. Microsoft said both vulnerabilities were publicly disclosed and exploited in the wild as zero-days. CISA added both flaws to its Known Exploited Vulnerabilities (KEV) list and urged federal agencies to patch them by June 3.

Open Happening

Microsoft May 2026 Patch Tuesday release

Security Patch Release
H score38 First: 13.05.2026 13:36 Last: 13.05.2026 13:36 Sources 1

About this happening: Microsoft's **May 13, 2026 Patch Tuesday** release fixed **138 vulnerabilities** across its product portfolio, including **Windows**, **Azure**, and **Edge**. None of the flaws we...

Latest development: 01.06.2026 15:30

Belgium's Centre for Cybersecurity warned that CVE-2026-41089 in Windows Netlogon is being actively exploited in the wild after Microsoft patched the stack-based buffer overflow during the May 2026 Patch Tuesday. The flaw affects all currently supported Windows Server versions, including Windows Server 2025, and can let an unauthenticated attacker gain remote code execution on targeted domain controllers.

Open Happening

Timeline

  1. 10.06.2026 12:38 2 articles · 3h ago

    Microsoft releases fixes for 206 vulnerabilities across Windows and Edge

    Mitigation Patch Update

    Microsoft released a June 2026 update that fixes a record 206 vulnerabilities across its software portfolio, including three publicly disclosed zero-days and multiple Critical issues in Windows Kernel, HTTP.sys, and Windows DHCP Client. The bundle also patches two non-Microsoft CVEs, addresses BitLocker and UEFI Secure Boot bypasses, plugs MiniPlasma tied to CVE-2020-17103, and introduces a MaxHeadersCount registry setting to help limit HTTP/2 and HTTP/3 header abuse.

    Show sources
    Open in new tab