cve.bz

Microsoft Patch Tuesday, June 2026: the CVEs

Filter

Microsoft Patch Tuesday June 2026: the CVEs Microsoft published on 9 June 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025, Jul 2025, Jun 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2026-50512EPSS 0.3%

    Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2026-50511EPSS 0.3%

    Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

  3. 7.5CVE-2026-50508EPSS 11%

    Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

  4. 6.8CVE-2026-50507EPSS 5.0%

    Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  5. 7.8CVE-2026-49161EPSS 0.2%

    Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

  6. 7.5CVE-2026-49160EPSS 57%

    Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

  7. 7.8CVE-2026-48583EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  8. 7.9CVE-2026-48578EPSS 0.3%

    Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.

  9. 7.9CVE-2026-48576EPSS 1.0%

    No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  10. 7.9CVE-2026-48575EPSS 0.3%

    Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  11. 7.8CVE-2026-48574EPSS 0.4%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

  12. 7.9CVE-2026-48573EPSS 1.0%

    No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  13. 7.9CVE-2026-48570EPSS 0.3%

    Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  14. 5.5CVE-2026-48569EPSS 0.4%

    Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  15. 7.9CVE-2026-48568EPSS 0.3%

    Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  16. 5.5CVE-2026-48566EPSS 0.4%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  17. 7.8CVE-2026-48565EPSS 0.4%

    Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

  18. 7.5CVE-2026-48563EPSS 0.5%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  19. 4.6CVE-2026-48562EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  20. 5.4CVE-2026-48560EPSS 0.9%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  21. 7.9CVE-2026-47656EPSS 0.3%

    Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

  22. 7.5CVE-2026-47654EPSS 0.5%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  23. 8.8CVE-2026-47653EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  24. 8.2CVE-2026-47652EPSS 0.3%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

  25. 7.0CVE-2026-47648EPSS 0.2%

    Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

  26. 9.8CVE-2026-47643EPSS 0.8%

    External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

  27. 5.4CVE-2026-47641EPSS 0.5%

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  28. 5.4CVE-2026-47640EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  29. 5.4CVE-2026-47639EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  30. 5.4CVE-2026-47638EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  31. 5.4CVE-2026-47637EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  32. 5.4CVE-2026-47636EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  33. 8.4CVE-2026-47635EPSS 0.3%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  34. 5.4CVE-2026-47634EPSS 0.5%

    Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  35. 5.4CVE-2026-47631EPSS 0.4%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  36. 8.0CVE-2026-47298EPSS 0.6%

    Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  37. 7.0CVE-2026-47293EPSS 0.2%

    Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-47292EPSS 0.4%

    Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

  39. 9.8CVE-2026-47291EPSS 25%

    Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

  40. 8.8CVE-2026-47289EPSS 1.0%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  41. 7.1CVE-2026-47288EPSS 0.5%

    Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

  42. 6.5CVE-2026-47287EPSS 0.8%

    Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

  43. 6.5CVE-2026-47284EPSS 1.0%

    Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  44. 9.6CVE-2026-47281EPSS 0.8%

    Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  45. 6.8CVE-2026-45658EPSS 0.4%

    Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.

  46. 9.8CVE-2026-45657EPSS 15%

    Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

  47. 7.8CVE-2026-45656EPSS 0.3%

    Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.

  48. 5.3CVE-2026-45655EPSS 0.4%

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  49. 7.9CVE-2026-45654EPSS 0.3%

    Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  50. 7.0CVE-2026-45653EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  51. 4.3CVE-2026-45650EPSS 0.6%

    User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network.

  52. 7.1CVE-2026-45649EPSS 0.4%

    Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.

  53. 8.8CVE-2026-45648EPSS 1.1%

    Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.

  54. 7.0CVE-2026-45647EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

  55. 7.8CVE-2026-45645EPSS 0.4%

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  56. 8.0CVE-2026-45644EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network.

  57. 7.8CVE-2026-45643EPSS 0.4%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  58. 3.9CVE-2026-45642EPSS 0.3%

    Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

  59. 7.8CVE-2026-45641EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally.

  60. 7.0CVE-2026-45640EPSS 0.2%

    Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

  61. 7.5CVE-2026-45639EPSS 0.9%

    Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

  62. 7.8CVE-2026-45638EPSS 0.3%

    Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  63. 7.8CVE-2026-45637EPSS 0.3%

    Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  64. 7.8CVE-2026-45636EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  65. 8.1CVE-2026-45635EPSS 0.6%

    Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

  66. 5.5CVE-2026-45634EPSS 0.4%

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.

  67. 6.8CVE-2026-45608EPSS 0.3%

    Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.

  68. 7.8CVE-2026-45607EPSS 0.4%

    Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

  69. 5.5CVE-2026-45606EPSS 0.4%

    Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.

  70. 7.8CVE-2026-45605EPSS 0.3%

    Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

  71. 5.5CVE-2026-45604EPSS 0.3%

    Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.

  72. 7.0CVE-2026-45603EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  73. 9.1CVE-2026-45602EPSS 0.4%

    No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.

  74. 7.0CVE-2026-45601EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  75. 7.8CVE-2026-45600EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  76. 8.1CVE-2026-45599EPSS 0.5%

    Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

  77. 7.0CVE-2026-45598EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  78. 7.0CVE-2026-45597EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.

  79. 7.0CVE-2026-45596EPSS 0.2%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  80. 5.4CVE-2026-45595EPSS 0.4%

    Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.

  81. 5.5CVE-2026-45594EPSS 0.4%

    Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.

  82. 7.8CVE-2026-45593EPSS 0.3%

    Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.

  83. 7.8CVE-2026-45592EPSS 0.3%

    Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

  84. 7.5CVE-2026-45591EPSS 2.5%

    Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  85. 7.9CVE-2026-45588EPSS 0.3%

    Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  86. 7.8CVE-2026-45586EPSS 3.6%

    Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.

  87. 8.1CVE-2026-45583EPSS 0.5%

    Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

  88. 8.8CVE-2026-45504EPSS 1.3%

    Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  89. 6.5CVE-2026-45503EPSS 0.4%

    Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

  90. 5.0CVE-2026-45502EPSS 20%

    Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

  91. 6.1CVE-2026-45501EPSS 0.4%

    Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

  92. 6.1CVE-2026-45500EPSS 0.4%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  93. 5.5CVE-2026-45491EPSS 0.4%

    Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

  94. 7.8CVE-2026-45490EPSS 0.4%

    Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

  95. 7.0CVE-2026-45487EPSS 0.2%

    Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

  96. 7.8CVE-2026-45486EPSS 0.4%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  97. 3.3CVE-2026-45485EPSS 0.4%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  98. 8.8CVE-2026-45484EPSS 34%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  99. 5.4CVE-2026-45483EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network.

  100. 8.4CVE-2026-45482EPSS 0.3%

    Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.