Microsoft security patch release for CVE-2026-42824
Security Patch Release
Summary
Hide ▲
Show ▼
Microsoft's fix for SearchLeak in Microsoft 365 Copilot Enterprise closed a critical flaw tied to CVE-2026-42824 that could expose mailbox, OneDrive, and SharePoint data through a crafted URL.
Related Happenings
Microsoft June 2026 Patch Tuesday record 206-vulnerability update
Security Patch Release
H score55
First: 10.06.2026 12:38
Last: 10.06.2026 12:38
Sources 1
About this happening:
Microsoft shipped a **record 206-vulnerability** update for its software portfolio, including **three publicly disclosed flaws**. The release spans **Critical** and **Important**...
Microsoft June 2026 Patch Tuesday record 206-vulnerability update
Security Patch ReleaseAbout this happening: Microsoft shipped a **record 206-vulnerability** update for its software portfolio, including **three publicly disclosed flaws**. The release spans **Critical** and **Important**...
Microsoft June 2026 Patch Tuesday record security update bundle
Security Patch Release
H score36
First: 10.06.2026 01:07
Last: 10.06.2026 01:07
Sources 1
About this happening:
**Microsoft** released a **record Patch Tuesday bundle** for **June 2026** that patches **nearly 200 security holes** across **Windows operating systems and supported software**,...
Microsoft June 2026 Patch Tuesday record security update bundle
Security Patch ReleaseAbout this happening: **Microsoft** released a **record Patch Tuesday bundle** for **June 2026** that patches **nearly 200 security holes** across **Windows operating systems and supported software**,...
Microsoft security patch release for CVE-2026-45586
Security Patch Release
H score41
First: 09.06.2026 20:57
Last: 09.06.2026 20:57
Sources 1
About this happening:
Microsoft's **June 2026 Patch Tuesday** delivers **200 flaw fixes** across Windows and related products, including **six zero-days** and **one actively exploited** vulnerability....
Microsoft security patch release for CVE-2026-45586
Security Patch ReleaseAbout this happening: Microsoft's **June 2026 Patch Tuesday** delivers **200 flaw fixes** across Windows and related products, including **six zero-days** and **one actively exploited** vulnerability....
Microsoft June 2026 Patch Tuesday (200 flaws, 3 zero-days)
Security Patch Release
H score37
First: 09.06.2026 20:57
Last: 09.06.2026 20:57
Sources 1
About this happening:
**Microsoft** released its **June 2026 Patch Tuesday**, delivering security updates for **200 flaws** and **three publicly disclosed zero-days** across Windows and related compone...
Microsoft June 2026 Patch Tuesday (200 flaws, 3 zero-days)
Security Patch ReleaseAbout this happening: **Microsoft** released its **June 2026 Patch Tuesday**, delivering security updates for **200 flaws** and **three publicly disclosed zero-days** across Windows and related compone...
Microsoft security patch release for CVE-2026-45659
Security Patch Release
H score23
First: 26.05.2026 14:49
Last: 26.05.2026 14:49
Sources 1
About this happening:
Microsoft released **SharePoint** updates for **CVE-2026-45659**, a **remote code execution** flaw that could let an authenticated attacker run code over the network without eleva...
Microsoft security patch release for CVE-2026-45659
Security Patch ReleaseAbout this happening: Microsoft released **SharePoint** updates for **CVE-2026-45659**, a **remote code execution** flaw that could let an authenticated attacker run code over the network without eleva...
Timeline
-
15.06.2026 16:00 2 articles · 2h ago
Microsoft fixes SearchLeak in Microsoft 365 Copilot Enterprise
Mitigation Patch UpdateMicrosoft addressed SearchLeak in Microsoft 365 Copilot Enterprise and assigned CVE-2026-42824 a critical rating. The fix closes a chain that could let a crafted URL expose data from a target's mailbox, OneDrive, or SharePoint account, and no user action is required to mitigate the threat.
Show sources
- New attack turned Microsoft 365 Copilot into 1-click data theft tool — www.bleepingcomputer.com — 15.06.2026 16:00
- New attack turned Microsoft 365 Copilot into 1-click data theft tool — www.bleepingcomputer.com — 15.06.2026 16:00