Infosecurity
Microsoft patches 200 flaws, zero day BitLocker bypass urgent
On June 10, 2026, Microsoft addressed 200 vulnerabilities in its latest Patch Tuesday updates, including three critical zero-days. Notable issues include CVE-2026-49160 (the "HTTP/2 Bomb"), which poses a denial of service risk, CVE-2026-50507 related to BitLocker bypass, and CVE-2026-45586 that allows privilege escalation. Key statistics from the updates show that 33 vulnerabilities were deemed critical, with 28 classified as remote code execution (RCE).
Other significant vulnerabilities include flaws in the Windows Graphics Component and the Remote Desktop Client, urging system administrators to prioritize patching these security threats.
AI summary of the original article from Infosecurity, written automatically by a language model. Quotes, figures and names come from that article; check it before relying on a detail. Read the original · How summaries are made
Story timeline CVE-2026-49160
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 9 Jun · 19:10 UTC | SecurityWeek | Microsoft fixes 200 bugs in June, none exploited, dozens critical |
| Tue 9 Jun · 19:10 UTC | SANS ISC | Microsoft June 2026 Patch Tuesday, (Tue, Jun 9th) |
| Tue 9 Jun · 22:40 UTC | Krebs on Security | Microsoft ships record patch batch amid AI driven vuln surge |
| Wed 10 Jun · 02:40 UTC | SecurityOnline | Microsoft Patch Tuesday fixes 206+ flaws amid zero day exploits |
| Wed 10 Jun · 08:30 UTC | Infosecurity | Microsoft patches 200 flaws, zero day BitLocker bypass urgent (this article) |
| Wed 10 Jun · 13:11 UTC | Malwarebytes | Microsoft patches record 206 flaws, fixing three zero‑day bugs |
| Wed 10 Jun · 14:52 UTC | SOCRadar | MS Patch Tuesday 2026 Fixes 206 Flaws Including Three Zero Days |