Find notable cyber news and cases, enriched with sources, timelines, and signals.

Microsoft June 2026 Patch Tuesday record security update bundle

Security Patch Release
First reported
Last updated
Happening score
H score 36
1 unique sources, 1 articles

Summary

Hide ▲

Microsoft released a record Patch Tuesday bundle for June 2026 that patches nearly 200 security holes across Windows operating systems and supported software, with nearly three dozen critical flaws and public exploit code already available for at least three weaknesses.

Related Happenings

Microsoft June 2026 Patch Tuesday (200 flaws, 3 zero-days)

Security Patch Release
H score37 First: 09.06.2026 20:57 Last: 09.06.2026 20:57 Sources 1

About this happening: **Microsoft** released its **June 2026 Patch Tuesday**, delivering security updates for **200 flaws** and **three publicly disclosed zero-days** across Windows and related compone...

Windows 11 cumulative updates KB5094126 and KB5093998 (June 2026 Patch Tuesday)

Security Patch Release
H score29 First: 09.06.2026 20:32 Last: 09.06.2026 20:32 Sources 1

About this happening: Microsoft released **Windows 11 KB5094126** and **KB5093998** mandatory cumulative updates to patch security vulnerabilities across **25H2/24H2** and **23H2** during **June 2026 P...

Microsoft May 2026 Patch Tuesday release

Security Patch Release
H score38 First: 13.05.2026 13:36 Last: 13.05.2026 13:36 Sources 1

About this happening: Microsoft's **May 13, 2026 Patch Tuesday** release fixed **138 vulnerabilities** across its product portfolio, including **Windows**, **Azure**, and **Edge**. None of the flaws we...

Latest development: 01.06.2026 15:30

Belgium's Centre for Cybersecurity warned that CVE-2026-41089 in Windows Netlogon is being actively exploited in the wild after Microsoft patched the stack-based buffer overflow during the May 2026 Patch Tuesday. The flaw affects all currently supported Windows Server versions, including Windows Server 2025, and can let an unauthenticated attacker gain remote code execution on targeted domain controllers.

Microsoft security patch release for CVE-2026-41089

Security Patch Release
H score27 First: 13.05.2026 00:46 Last: 13.05.2026 00:46 Sources 1

About this happening: **Microsoft** and other major software vendors shipped a heavy **May 2026** patch cycle, with fixes spanning **Windows**, **iOS**, **Firefox**, **Oracle** products, and **Chrome**...

Microsoft Windows 11 mandatory Patch Tuesday updates (KB5089549, KB5087420)

Security Patch Release
H score29 First: 12.05.2026 21:09 Last: 12.05.2026 21:09 Sources 1

About this happening: Microsoft released **mandatory Windows 11 cumulative updates** for **KB5089549** and **KB5087420**, delivering the **May 2026 Patch Tuesday** fixes for **120 vulnerabilities** acr...

Timeline

  1. 10.06.2026 01:07 1 articles · 2h ago

    Microsoft pushes a stopgap fix for a Visual Studio Code zero-day

    Mitigation Patch Update

    Microsoft pushed a stopgap fix for a Visual Studio Code flaw after a researcher published exploitation instructions, addressing a vulnerability that could let attackers steal GitHub tokens with a single click.

    Show sources
  2. 10.06.2026 01:07 2 articles · 2h ago

    Microsoft releases June 2026 Patch Tuesday updates for nearly 200 vulnerabilities

    Initial Disclosure

    Microsoft released software updates for nearly 200 Windows and supported-software vulnerabilities in its June 2026 Patch Tuesday, including nearly three dozen critical flaws and zero-days such as CVE-2026-49160 in Microsoft Internet Information Services (IIS), CVE-2026-45586 in the Windows Collaborative Translation Framework, CVE-2026-50507 in BitLocker, and a Visual Studio Code zero-day that could let attackers steal GitHub tokens with a single click; exploit code was already public for at least three weaknesses.

    Show sources
  3. 10.06.2026 01:07 1 articles · 2h ago

    Nightmare Eclipse publishes a claimed Windows Defender zero-day exploit

    Exploitation Observed

    Immediately after Microsoft released the June 9 patches, Nightmare Eclipse published an exploit for a claimed zero-day bug in Windows Defender.

    Show sources