Microsoft patches 200 flaws in June, flags high browser risk

Microsoft published 200 vulnerabilities in the June 2026 Patch Tuesday, with significant patches addressing an unusually high number of browser vulnerabilities, particularly affecting the Chromium framework. Notably, a researcher named Nightmare Eclipse disclosed several uncoordinated vulnerabilities, raising alarm about potential exploitation of these flaws in fully patched systems.

Critical vulnerabilities include denial-of-service risks in HTTP/2, elevation of privilege issues in Microsoft PowerToys, and uncoordinated disclosures connected to Microsoft Defender. The Post also notes that several products are approaching end-of-support, with key lifecycle changes for SQL Server and SharePoint. Moreover, charts detailing vulnerabilities by product family and critical zero-day vulnerabilities were included, emphasizing the elevated risk landscape.