cve.bz

Microsoft Patch Tuesday, June 2026: the CVEs

Filter

Microsoft Patch Tuesday June 2026: the CVEs Microsoft published on 9 June 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025, Jul 2025, Jun 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 9.8CVE-2026-47643EPSS 0.8%

    External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

  2. 9.8CVE-2026-47291EPSS 25%

    Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

  3. 9.6CVE-2026-47281EPSS 0.8%

    Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  4. 9.8CVE-2026-45657EPSS 15%

    Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

  5. 9.1CVE-2026-45602EPSS 0.4%

    No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.

  6. 9.6CVE-2026-42904EPSS 0.4%

    Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.

  7. 9.8CVE-2026-26142EPSS 1.9%

    Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.