Home › Microsoft Patch Tuesday › June 2026

Microsoft Patch Tuesday, June 2026

·

Microsoft's June 2026 security release, published June 9, 2026: 28 updates fixing 180 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

28
Updates (KBs)
180
CVEs fixed
1
On the CISA KEV list
17
Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2026-58644Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 9.8Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2026-42990SQL Server ODBC driver Elevation of Privilege VulnerabilityCVSS 9.8
CVE-2026-44815DHCP Client Service Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-45657Windows Kernel Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-47291HTTP.sys Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-41096Windows DNS Client Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-42904Windows TCP/IP Elevation of Privilege VulnerabilityCVSS 9.6
CVE-2026-55008Microsoft Exchange Server Spoofing VulnerabilityCVSS 9.6
CVE-2025-10263ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by comp...CVSS 9.3
CVE-2026-40402Windows Hyper-V Elevation of Privilege VulnerabilityCVSS 9.3
CVE-2026-45602Windows Dynamic Host Configuration Protocol (DHCP) Tampering VulnerabilityCVSS 9.1
CVE-2026-45484Microsoft SharePoint Elevation of Privilege VulnerabilityCVSS 8.8
CVE-2026-42985Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Microsoft SharePoint Enterprise Server 2016 (2)Microsoft SharePoint Server 2019 (2)Windows Server 2012 R2 (2)Windows Server 2012 R2 (Server Core installation) (2)Windows Server 2025 (Server Core installation) (2)Windows Server 2025 (2)Microsoft Office 2016 (32-bit edition) (2)Microsoft Office 2016 (64-bit edition) (2)Microsoft SharePoint Server Subscription Edition (1)Windows 11 Version 26H1 for ARM64-based Systems (1)

Every update in this release

All 28 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

UpdateSeverityMax CVSSCVEs fixedProductsAlso
KB5002880 ExploitedCritical9.830Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002874 ExploitedCritical9.831Microsoft SharePoint Server 2019Support · Catalog
KB5002873 ExploitedCritical9.831Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5095051Critical9.8123Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based SystemsSupport · Catalog
KB5094042Critical9.864Windows Server 2012, Windows Server 2012 (Server Core installation)Support · Catalog
KB5094041Critical9.867Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)Support · Catalog
KB5094127Critical9.8148Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, and 4 moreSupport · Catalog
KB5094126Critical9.8107Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, and 3 moreSupport · Catalog
KB5093998Critical9.8158Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 22H2 for ARM64-based Systems, and 1 moreSupport · Catalog
KB5094123Critical9.889Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, and 1 moreSupport · Catalog
KB5094128Critical9.8105Windows Server 2022, Windows Server 2022 (Server Core installation)Support · Catalog
KB5094125Critical9.8109Windows Server 2025 (Server Core installation), Windows Server 2025Support · Catalog
KB5094122Critical9.876Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, and 1 moreSupport · Catalog
KB5103215Critical9.611Microsoft Exchange Server 2016 Cumulative Update 23Support · Catalog
KB5103212Critical9.611Microsoft Exchange Server Subscription Edition RTMSupport · Catalog
KB5103213Critical9.611Microsoft Exchange Server 2019 Cumulative Update 15Support · Catalog
KB5103214Critical9.611Microsoft Exchange Server 2019 Cumulative Update 14Support · Catalog
KB5002881High8.48Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002876High8.48Microsoft SharePoint Server 2019Support · Catalog
KB5002878High8.49Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)Support · Catalog
KB5002879High8.43Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)Support · Catalog
KB5002875High8.27Office Online ServerSupport · Catalog
KB5002877High8.27Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)Support · Catalog
KB5097148High7.83.NET 10.0 installed on Windows, .NET 10.0 installed on Mac OS, .NET 10.0 installed on Linux, and 1 moreSupport · Catalog
KB5097149High7.83.NET 8.0 installed on Windows, .NET 8.0, .NET 8.0 installed on Linux, and 2 moreSupport · Catalog
KB5097150High7.83.NET 9.0 installed on Windows, .NET 9.0 installed on Linux, .NET 9.0 installed on Mac OS, and 1 moreSupport · Catalog
KB5002852High7.81Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)Support · Catalog
KB5094006High7.81Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)Support · Catalog
Take this release to your AI

Composed from the June 2026 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

See every Patch Tuesday, all months  |  The live Microsoft patch tracker

← May 2026July 2026 →

Now see your own patch state.

Senserva reads your Microsoft 365, Intune, Defender, and Entra ID environment and turns this release into your list: every update still missing, on every device, ranked by what attackers are actually exploiting. The 650+ configuration checks come with it.

1Find it2Fix it3Prove it
Start my free patch auditAll you do is register.
Reference: Microsoft CVE and vulnerability management, ranked by real-world risk, and the Microsoft patching guide.
Data notice: this page is provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative Microsoft advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.