I hope this round doesn't find anything serious.

Microsoft released a security update (Patch Tuesday) for June 2026 to fix a total of 200 vulnerabilities. There are three publicly listed Zero-Day vulnerabilities, but none have been reported to have been executed.

.

For Windows 11, there is a cumulative update release, code KB5094126 and KB5093998. The Windows 10 section that is in the Extended Security Update (ESU) project has been updated KB5094127.

.

In this round of updates, there are 33 critical vulnerabilities, divided into 28 Remote Code Execution - RCE vulnerabilities, 4 Elevation of Privilege vulnerabilities, and one Information Disclosure vulnerability.

.

A breakdown of the vulnerabilities that have been addressed is as follows:

.

- Elevation of Privilege vulnerability: 65 items

- Security Feature Bypass vulnerability: 19 items

- Remote Code Execution: 55 items

- Information Disclosure: 30 items

- Denial of Service vulnerability: 7 items

- Identity forgery vulnerability (Spoofing): 27 items

.

The figures do not include the vulnerabilities of Mariner, Azure HorizDB, Microsoft Copilot, Copilot Chat, M365 Copilot, Microsoft Exchange Online, Microsoft Graph, as well as many Microsoft Edge / Chromium vulnerabilities that were patched earlier in the same month.

.

Meanwhile, other software manufacturers also issued security updates in June, including Acer, Adobe, Check Point, Cisco, Fortinet, Google, Ivanti, Ubiquiti, SAP and Veeam, with some fixing serious vulnerabilities, including ones that were actually exploited.

.

It recommends that system administrators and users rush to install Microsoft security updates and related software ASAP, especially organizations running Windows Server, IIS, BitLocker, and systems open over the network, to reduce the risk of attack through these vulnerabilities.

.

Source: bleepingcomputer

# IT should know # IT News # Includes IT matters # IT