What was in the June 2026 Microsoft Patch Tuesday?

Microsoft released 37 updates fixing 172 CVEs in June 2026, of which 0 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › June 2026

Microsoft Patch Tuesday, June 2026

Released June 9, 2026 · data last refreshed 2026-08-01

Microsoft's June 2026 security release, published June 9, 2026: 37 updates fixing 172 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 6 CVEs from this release are on the Senserva hot list today (as of 2026-08-01), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.

Updates (KBs)

172

CVEs fixed

Actively exploited

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2026-42897Microsoft Exchange Server Spoofing VulnerabilityCVSS 8.1Exploited Hot now

Other high-risk CVEs (CVSS 8.8+)

CVE-2026-41089Windows Netlogon Remote Code Execution VulnerabilityCVSS 9.8

CVE-2026-41096Windows DNS Client Remote Code Execution VulnerabilityCVSS 9.8

CVE-2026-47291HTTP.sys Remote Code Execution VulnerabilityCVSS 9.8 Hot now

CVE-2026-44815DHCP Client Service Remote Code Execution VulnerabilityCVSS 9.8

CVE-2026-45657Windows Kernel Remote Code Execution VulnerabilityCVSS 9.8

CVE-2026-42904Windows TCP/IP Elevation of Privilege VulnerabilityCVSS 9.6

CVE-2025-10263ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by comp...CVSS 9.3

CVE-2026-40402Windows Hyper-V Elevation of Privilege VulnerabilityCVSS 9.3

CVE-2026-45602Windows Dynamic Host Configuration Protocol (DHCP) Tampering VulnerabilityCVSS 9.1

CVE-2026-45504Microsoft Exchange Server Elevation of Privilege VulnerabilityCVSS 8.8 Hot now

CVE-2026-34329Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2026-40403Windows Graphics Component Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows 10 Version 1809 for 32-bit Systems (8)Windows 10 Version 1809 for x64-based Systems (8)Windows Server 2019 (8)Microsoft Office 365 for Mac (7)Microsoft Exchange Server 2016 Cumulative Update 23 (4)Microsoft Exchange Server 2019 Cumulative Update 14 (4)Microsoft Exchange Server 2019 Cumulative Update 15 (4)Windows Server 2025 (Server Core installation) (4)Windows 11 Version 25H2 for ARM64-based Systems (4)Windows 11 Version 25H2 for x64-based Systems (4)

Take this release to your AI

Composed from the June 2026 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the June 2026 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2026-06, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 37 updates (KBs) fixing 172 CVEs, 0 actively exploited (CISA KEV), 0 ransomware-linked, 22 Critical updates.
Actively exploited CVEs: CVE-2026-42897 (CVSS 8.1).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← May 2026 July 2026 →