SOCRadarAmeer Owda
MS Patch Tuesday 2026 Fixes 206 Flaws Including Three Zero Days
The June 2026 Patch Tuesday from Microsoft addresses a significant total of 206 vulnerabilities, including three zero-day vulnerabilities, notably the HTTP/2 Bomb Flaw (CVE-2026-49160). Key highlights include: 1. **Critical Vulnerabilities**: High-risk vulnerabilities identified include CVE-2026-48567 (CVSS 10.0) for Azure HorizonDB and several others rated above 9.0.
2. **Zero-Day Vulnerabilities**: The critical three zero-days pose serious risks, especially CVE-2026-49160 which allows Denial of Service attacks via crafted HTTP requests. 3. **Patching Priorities**: Organizations should prioritize patching systems dealing with HTTP/HTTPS traffic and DHCP infrastructure, while ensuring BitLocker protection on devices is maintained due to bypass risks. 4. **Bulk Updates**: The release emphasizes the urgency of patching to mitigate potential exploitation.
AI summary of the original article from SOCRadar, written automatically by a language model. Quotes, figures and names come from that article; check it before relying on a detail. Read the original · How summaries are made
Story timeline CVE-2026-49160
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 9 Jun · 19:10 UTC | SecurityWeek | Microsoft fixes 200 bugs in June, none exploited, dozens critical |
| Tue 9 Jun · 19:10 UTC | SANS ISC | Microsoft June 2026 Patch Tuesday, (Tue, Jun 9th) |
| Tue 9 Jun · 22:40 UTC | Krebs on Security | Microsoft ships record patch batch amid AI driven vuln surge |
| Wed 10 Jun · 02:40 UTC | SecurityOnline | Microsoft Patch Tuesday fixes 206+ flaws amid zero day exploits |
| Wed 10 Jun · 08:30 UTC | Infosecurity | Microsoft patches 200 flaws, zero day BitLocker bypass urgent |
| Wed 10 Jun · 13:11 UTC | Malwarebytes | Microsoft patches record 206 flaws, fixing three zero‑day bugs |
| Wed 10 Jun · 14:52 UTC | SOCRadar | MS Patch Tuesday 2026 Fixes 206 Flaws Including Three Zero Days (this article) |