Vulnerabilitycritical
Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities
- CVEs
- CVE-2026-42985CVE-2026-47291CVE-2026-44803CVE-2026-44812CVE-2026-42992CVE-2026-44799CVE-2026-44801CVE-2026-47289CVE-2026-48563CVE-2026-45607CVE-2026-45641CVE-2026-47652CVE-2026-45657CVE-2026-48574CVE-2026-42987CVE-2026-44815CVE-2026-45456CVE-2026-45458CVE-2026-47635CVE-2026-45461CVE-2026-45463CVE-2026-45472CVE-2026-45474CVE-2026-45476CVE-2026-44810CVE-2026-47644CVE-2026-26142CVE-2026-32193CVE-2026-45648
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-26142 | Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network | 9.8 | 2% | ||
| CVE-2026-32193 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute… | 8.8 | <1% | ||
CVE-2026-42985+3 related CVEs | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network | 8.8 group max | 1% | ||
| CVE-2026-42987 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network | 8.1 | <1% | ||
CVE-2026-47289+1 related CVE | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network | 8.8 group max | <1% | ||
CVE-2026-44803+1 related CVE | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally | 7.8 | <1% | ||
CVE-2026-45657+2 related CVEs | Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network | 9.8 group max | 15% | ||
CVE-2026-47291+3 related CVEs | Unauthenticated RCE via Integer Overflow in Windows HTTP.sys | 9.8 group max | 23% | ||
| CVE-2026-45456 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally | 8.4 | <1% | ||
| CVE-2026-45476 | Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally | 8.2 | <1% | ||
| CVE-2026-45641 | Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally | 7.8 | <1% | ||
| CVE-2026-45648 | Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network | 8.8 | 1% | ||
| CVE-2026-47635 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally | 8.4 | <1% | ||
| CVE-2026-47644 | Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized… | 7.5 | <1% | PoC |
From the original article
7 min read at blog.talosintelligence.com
Microsoft has released its monthly security update for June 2026, which includes 206 vulnerabilities affecting a range of products, including 32 that Microsoft marked as “critical”.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.