Patch Tuesday June 2026
Microsoft’s June 2026 security update release: 220 CVEs, 0 exploited in the wild, 48 rated critical. Severity, CVSS and affected product families from the MSRC Security Update Guide.
2026-06-01
220CVEs, Microsoft CNA
0Exploited in the wild
48Critical
4Publicly disclosed
Publicly disclosed
| CVE | Vulnerability | Severity | CVSS | Impact |
|---|---|---|---|---|
| CVE-2026-50656 | Microsoft Defender Elevation of Privilege Vulnerability | Important | 7.8 | Elevation of Privilege |
| CVE-2026-45586 | Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability Windows | Important | 7.8 | Elevation of Privilege |
| CVE-2026-49160 | HTTP.sys Denial of Service Vulnerability Windows | Important | 7.5 | Denial of Service |
| CVE-2026-50507 | Windows BitLocker Security Feature Bypass Vulnerability Windows | Important | 6.8 | Security Feature Bypass |
Critical
By impact
| Denial of Service | 7 |
| Elevation of Privilege | 75 |
| Information Disclosure | 32 |
| Remote Code Execution | 55 |
| Security Feature Bypass | 18 |
| Spoofing | 29 |
| Tampering | 4 |
By product family
| .NET | 9 |
| Azure | 7 |
| Defender | 1 |
| Dynamics 365 | 3 |
| Edge | 3 |
| Exchange Server | 7 |
| Office | 29 |
| Other | 19 |
| SharePoint | 22 |
| Teams | 1 |
| Windows | 119 |
Counts include CVEs where Microsoft is the assigning CNA. Third-party CVEs (for example Chromium in Edge) are excluded. Severity, CVSS and exploitation status are Microsoft's published values. See the full advisory list to search every CVE.