Microsoft Patch Tuesday — June 2026

Tuesday, 9 June 2026

Vulnerabilities: 200
Critical: 8
High: 136
Zero-days: 0
Public exploit: 5

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 8

Critical 9.8
CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability
EPSS 1.9%
Critical 9.8
CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability
EPSS 1.1%
Critical 9.8
CVE-2026-45657 Windows Kernel Remote Code Execution Vulnerability
EPSS 15%
Critical 9.8
CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability
EPSS 25%
Critical 9.8
CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability
Critical 9.6
CVE-2026-42904 Windows TCP/IP Elevation of Privilege Vulnerability
Critical 9.6
CVE-2026-47281 Visual Studio Code Elevation of Privilege Vulnerability
Critical 9.1
CVE-2026-45602 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability

Public exploit code 5

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2026-45504 Public exploit Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.8
CVE-2026-42978 Public exploit Windows Push Notifications Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42980 Public exploit NT OS Kernel Elevation of Privilege Vulnerability
EPSS 6.9%
High 7.5
CVE-2026-49160 Public exploit HTTP.sys Denial of Service Vulnerability
EPSS 57%
Medium 6.8
CVE-2026-50507 Public exploit Windows BitLocker Security Feature Bypass Vulnerability
EPSS 5%

All vulnerabilities 200

Critical8 Show

Critical 9.8
CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability
EPSS 1.9%
Critical 9.8
CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability
EPSS 1.1%
Critical 9.8
CVE-2026-45657 Windows Kernel Remote Code Execution Vulnerability
EPSS 15%
Critical 9.8
CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability
EPSS 25%
Critical 9.8
CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability
Critical 9.6
CVE-2026-42904 Windows TCP/IP Elevation of Privilege Vulnerability
Critical 9.6
CVE-2026-47281 Visual Studio Code Elevation of Privilege Vulnerability
Critical 9.1
CVE-2026-45602 Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability

High136 Show

High 8.8
CVE-2026-45504 Public exploit Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 1.3%
High 8.8
CVE-2026-32193 Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
High 8.8
CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
High 8.8
CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2026-45484 Microsoft SharePoint Elevation of Privilege Vulnerability
EPSS 34%
High 8.8
CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability
High 8.8
CVE-2026-47653 Remote Desktop Client Remote Code Execution Vulnerability
High 8.4
CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability
High 8.4
CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
High 8.4
CVE-2026-45456 Microsoft Outlook and Word Remote Code Execution Vulnerability
High 8.4
CVE-2026-45458 Microsoft Outlook and Word Remote Code Execution Vulnerability
High 8.4
CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2026-45463 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2026-45472 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2026-45474 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2026-45482 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
High 8.4
CVE-2026-45607 Windows Hyper-V Remote Code Execution Vulnerability
High 8.4
CVE-2026-45641 Windows Hyper-V Remote Code Execution Vulnerability
High 8.4
CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability
High 8.2
CVE-2026-44822 Microsoft Excel Information Disclosure Vulnerability
High 8.2
CVE-2026-45476 Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
High 8.2
CVE-2026-47652 Windows Hyper-V Remote Code Execution Vulnerability
High 8.1
CVE-2026-42835 Microsoft Teams for Android Information Disclosure Vulnerability
EPSS 1.3%
High 8.1
CVE-2026-42974 Windows Performance Monitor Remote Code Execution Vulnerability
High 8.1
CVE-2026-42981 Windows Performance Monitor Remote Code Execution Vulnerability
High 8.1
CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution
High 8.1
CVE-2026-45503 Microsoft Exchange Server Information Disclosure Vulnerability
High 8.1
CVE-2026-45599 Windows UPnP Device Host Remote Code Execution Vulnerability
High 8.1
CVE-2026-45635 Windows UPnP Device Host Remote Code Execution Vulnerability
High 8.1
CVE-2026-47631 Microsoft Exchange Server Spoofing Vulnerability
High 8.0
CVE-2026-45644 Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability
High 8.0
CVE-2026-47298 Microsoft SharePoint Server Remote Code Execution Vulnerability
High 7.9
CVE-2026-45588 Secure Boot Security Feature Bypass Vulnerability
High 7.9
CVE-2026-45654 Secure Boot Security Feature Bypass Vulnerability
High 7.9
CVE-2026-47656 Windows Boot Manager Security Feature Bypass Vulnerability
High 7.9
CVE-2026-48568 Secure Boot Security Feature Bypass Vulnerability
High 7.9
CVE-2026-48570 Secure Boot Security Feature Bypass Vulnerability
High 7.9
CVE-2026-48573 Secure Boot Security Feature Bypass Vulnerability
EPSS 1%
High 7.9
CVE-2026-48575 Secure Boot Security Feature Bypass Vulnerability
High 7.9
CVE-2026-48576 Secure Boot Security Feature Bypass Vulnerability
EPSS 1%
High 7.9
CVE-2026-48578 Secure Boot Security Feature Bypass Vulnerability
High 7.8
CVE-2026-42978 Public exploit Windows Push Notifications Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42980 Public exploit NT OS Kernel Elevation of Privilege Vulnerability
EPSS 6.9%
High 7.8
CVE-2026-33828 Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
High 7.8
CVE-2026-41092 Microsoft Kinect Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42828 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42829 Windows Administrator Protection Secure Feature Bypass Vulnerability
High 7.8
CVE-2026-42837 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42902 Microsoft PowerToys Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42905 Windows DWM Core Library Elevation of Privilege Vulnerability
EPSS 2%
High 7.8
CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42916 NT OS Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42977 Windows Push Notifications Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42979 Windows Push Notifications Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42983 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege Vulnerability
EPSS 2%
High 7.8
CVE-2026-42989 Winlogon Elevation of Privilege Vulnerability
EPSS 2.3%
High 7.8
CVE-2026-42991 Windows Push Notifications Elevation of Privilege Vulnerability
High 7.8
CVE-2026-44802 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability
High 7.8
CVE-2026-44804 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-44807 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-44808 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-44809 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2026-44811 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability
High 7.8
CVE-2026-44813 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-44817 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-44819 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2026-44820 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-44823 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-44824 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2026-45457 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2026-45469 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-45471 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2026-45475 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2026-45486 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2026-45487 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
High 7.8
CVE-2026-45490 .NET SDK Elevation of Privilege Vulnerability
High 7.8
CVE-2026-45586 Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
EPSS 3.6%
High 7.8
CVE-2026-45592 Windows Internet (wininet.dll) Elevation of Privilege Vulnerability
High 7.8
CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability
High 7.8
CVE-2026-45600 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2026-45605 Windows Bluetooth Service Elevation of Privilege Vulnerability
High 7.8
CVE-2026-45636 Windows NTFS Remote Code Execution Vulnerability
High 7.8
CVE-2026-45637 Microsoft DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-45638 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2026-45643 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2026-45645 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2026-45656 UEFI Secure Boot Security Feature Bypass Vulnerability
High 7.8
CVE-2026-45658 Windows BitLocker Security Feature Bypass Vulnerability
High 7.8
CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability
High 7.8
CVE-2026-48565 Windows Narrator Braille Elevation of Privilege Vulnerability
High 7.8
CVE-2026-48574 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2026-48583 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2026-49161 Microsoft PC Manager Security Feature Bypass Vulnerability
High 7.8
CVE-2026-50511 Microsoft PC Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2026-50512 Microsoft PC Manager Elevation of Privilege Vulnerability
High 7.5
CVE-2026-49160 Public exploit HTTP.sys Denial of Service Vulnerability
EPSS 57%
High 7.5
CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability
High 7.5
CVE-2026-42908 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
High 7.5
CVE-2026-42909 Remote Desktop Client Remote Code Execution Vulnerability
High 7.5
CVE-2026-42913 Remote Desktop Client Remote Code Execution Vulnerability
High 7.5
CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability
High 7.5
CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability
High 7.5
CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability
High 7.5
CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability
High 7.5
CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability
High 7.5
CVE-2026-45591 ASP.NET Core Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
High 7.5
CVE-2026-47654 Remote Desktop Client Remote Code Execution Vulnerability
High 7.5
CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability
High 7.3
CVE-2026-45481 Microsoft SharePoint Server Spoofing Vulnerability
High 7.3
CVE-2026-47634 Microsoft SharePoint Server Spoofing Vulnerability
High 7.1
CVE-2026-45649 Office for Android Spoofing Vulnerability
High 7.1
CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
High 7.1
CVE-2026-48569 Visual Studio Code Security Feature Bypass Vulnerability
High 7.0
CVE-2026-34335 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2026-41108 Windows DNS Client Elevation of Privilege Vulnerability
High 7.0
CVE-2026-42836 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
High 7.0
CVE-2026-42911 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability
High 7.0
CVE-2026-42984 Windows Kernel Elevation of Privilege Vulnerability
High 7.0
CVE-2026-44818 Microsoft Excel Remote Code Execution Vulnerability
High 7.0
CVE-2026-45596 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2026-45597 Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability
High 7.0
CVE-2026-45598 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2026-45601 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2026-45603 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2026-45640 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
High 7.0
CVE-2026-45653 Windows Kernel Elevation of Privilege Vulnerability
High 7.0
CVE-2026-47293 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
High 7.0
CVE-2026-47648 Windows Storage Elevation of Privilege Vulnerability

Medium51 Show

Medium 6.8
CVE-2026-50507 Public exploit Windows BitLocker Security Feature Bypass Vulnerability
EPSS 5%
Medium 6.8
CVE-2026-45608 Windows DHCP Client Information Disclosure Vulnerability
Medium 6.5
CVE-2026-42903 Windows Kerberos Denial of Service Vulnerability
Medium 6.5
CVE-2026-42907 Windows Shell Information Disclosure Vulnerability
Medium 6.5
CVE-2026-45454 Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2026-45501 Microsoft Exchange Server Spoofing Vulnerability
Medium 6.5
CVE-2026-47284 Visual Studio Code Information Disclosure Vulnerability
EPSS 1%
Medium 6.5
CVE-2026-47287 Visual Studio Code Tampering Vulnerability
Medium 6.5
CVE-2026-50508 Windows NTLM Spoofing Vulnerability
EPSS 11%
Medium 6.2
CVE-2026-45491 .NET Tampering Vulnerability
Medium 6.1
CVE-2026-45500 Microsoft Exchange Server Spoofing Vulnerability
Medium 5.5
CVE-2026-42906 Windows Shell Information Disclosure Vulnerability
Medium 5.5
CVE-2026-42915 Microsoft Windows VMSwitch Denial of Service Vulnerability
Medium 5.5
CVE-2026-42968 Windows Telephony Server Information Disclosure Vulnerability
Medium 5.5
CVE-2026-42969 Windows Push Notification Information Disclosure Vulnerability
Medium 5.5
CVE-2026-42970 Windows Push Notification Information Disclosure Vulnerability
Medium 5.5
CVE-2026-42971 Windows Push Notification Information Disclosure Vulnerability
Medium 5.5
CVE-2026-42972 Windows Hyper-V Information Disclosure Vulnerability
Medium 5.5
CVE-2026-42973 Windows Push Notification Information Disclosure Vulnerability
Medium 5.5
CVE-2026-44805 Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
Medium 5.5
CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability
Medium 5.5
CVE-2026-44821 Microsoft Office Information Disclosure Vulnerability
Medium 5.5
CVE-2026-45594 Windows Application Identity (AppID) Information Disclosure Vulnerability
Medium 5.5
CVE-2026-45604 Windows Managed Installer Information Disclosure Vulnerability
Medium 5.5
CVE-2026-45606 Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Medium 5.5
CVE-2026-45634 Windows DHCP Client Information Disclosure Vulnerability
Medium 5.5
CVE-2026-45647 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
Medium 5.5
CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability
Medium 5.4
CVE-2026-33113 Microsoft SharePoint Server Spoofing Vulnerability
Medium 5.4
CVE-2026-45453 Microsoft SharePoint Server Spoofing Vulnerability
Medium 5.4
CVE-2026-45464 Microsoft SharePoint Server Spoofing Vulnerability
Medium 5.4
CVE-2026-45465 Microsoft SharePoint Server Spoofing Vulnerability
Medium 5.4
CVE-2026-45595 Windows Mark of the Web Security Feature Bypass Vulnerability
Medium 5.4
CVE-2026-47636 Microsoft SharePoint Server Spoofing Vulnerability
Medium 5.4
CVE-2026-47639 Microsoft SharePoint Server Spoofing Vulnerability
Medium 5.4
CVE-2026-48560 Microsoft SharePoint Server Spoofing Vulnerability
Medium 5.3
CVE-2026-42914 Windows Kerberos Denial of Service Vulnerability
Medium 5.3
CVE-2026-45655 Windows BitLocker Security Feature Bypass Vulnerability
Medium 5.0
CVE-2026-45502 Microsoft Exchange Server Information Disclosure Vulnerability
EPSS 20%
Medium 4.7
CVE-2026-45460 Microsoft Office Information Disclosure Vulnerability
Medium 4.6
CVE-2026-45462 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.6
CVE-2026-45467 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.6
CVE-2026-45468 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.6
CVE-2026-45479 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.6
CVE-2026-45483 Microsoft Office Project Server Spoofing Vulnerability
Medium 4.6
CVE-2026-47637 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.6
CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.6
CVE-2026-47640 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.6
CVE-2026-47641 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.6
CVE-2026-48562 Microsoft SharePoint Server Spoofing Vulnerability
Medium 4.3
CVE-2026-45650 Microsoft Bing Search Spoofing Vulnerability

Low5 Show

Most affected products

Windows 11 version 26H1 111 · 5 crit.
Windows Server 2025 109 · 5 crit.
Windows Server 2025 (Server Core installation) 109 · 5 crit.
Windows 11 Version 24H2 105 · 5 crit.
Windows 11 Version 25H2 105 · 5 crit.
Windows Server 2022 104 · 5 crit.
Windows 11 version 23H2 99 · 5 crit.
Windows 10 Version 21H2 91 · 4 crit.
Windows 10 Version 22H2 91 · 4 crit.
Windows Server 2019 88 · 3 crit.
Windows Server 2019 (Server Core installation) 88 · 3 crit.
Windows 10 Version 1809 84 · 3 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (9 Jun). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →