Cyber Security News

Microsoft Patch Tuesday June 2026 Fixes 198 Vulnerabilities, Including 3 Zero-Days

Microsoft’s June 2026 Patch Tuesday fixes 198 vulnerabilities across Windows, Office, Azure and other Microsoft products, including three zero‑day flaws that were exploited or publicly disclosed before patches were available.

Security teams should fast‑track deployment of BitLocker and HTTP.sys, Remote Desktop, Hyper‑V, and core identity components such as Kerberos and Active Directory.

Microsoft’s June 9, 2026 Patch Tuesday addresses 198 CVEs spanning desktop, server, cloud, and developer tooling. The update continues a recent trend of large monthly patch loads with multiple Critical remote code execution (RCE) and elevation of privilege (EoP) bugs.

According to third‑party analyses, three of the vulnerabilities were already known to attackers or had been publicly disclosed before patches were issued, increasing the risk in unpatched environments. All 198 CVEs require customer action, so simply relying on cloud‑side mitigations is not enough.

This mix shows a strong focus on post‑compromise movement (EoP), initial access and lateral movement (RCE), and attacks on trust and identity (spoofing, feature bypass).

The Three Zero‑Day Vulnerabilities

Microsoft confirmed three zero‑day vulnerabilities were either exploited in the wild or publicly disclosed before patches became available.

  • CVE‑2026‑50507 – Windows BitLocker Security Feature Bypass (Important). This flaw allows an attacker with physical or local access to bypass BitLocker full‑disk encryption, undermining a last‑line control for lost or stolen endpoints. Environments that rely on BitLocker for compliance or device protection should prioritize this update and review their disk‑encryption coverage.
  • CVE‑2026‑49160 – HTTP.sys Denial of Service (Important)CVE‑2026‑49160 affects the HTTP/2 stack in HTTP.sys, which underpins IIS and other Windows networking services. Crafted request streams could knock internet‑facing web servers offline, making this a high‑priority patch for any exposed Windows web infrastructure.
  • CVE‑2026‑45586 – CTFMON Elevation of Privilege (zero‑day). The Windows Collaborative Translation Framework (CTFMON) EoP bug enables attackers to escalate privileges once they have code execution on a target. In practice, this type of local privilege escalation is often chained with phishing or browser exploits to achieve SYSTEM‑level control.

Together, these zero‑days highlight attackers’ focus on encryption bypass, service disruption, and boot‑/logon‑path integrity.

Critical RCE: RDP, Hyper‑V, Identity and Office

This month’s release includes 54 RCE vulnerabilities, several of which are rated Critical across remote access, virtualization, identity, and productivity workloads.

  • Remote Desktop Client (RDC) – 11 RCE CVEs, including Critical:
    • CVE‑2026‑44801 – Remote Desktop Client RCE
    • CVE‑2026‑44799 – Remote Desktop Client RCE
    • CVE‑2026‑42992 – Remote Desktop Client RCE
    • CVE‑2026‑42985 – Remote Desktop Client RCE
  • Successful exploitation could allow code execution when a user connects to a malicious RDP server or opens an attacker‑controlled .rdp file, so restricting untrusted RDP targets is essential.
  • Windows Hyper‑V – Critical guest‑to‑host RCE
    • CVE‑2026‑47652 – Hyper‑V RCE
    • CVE‑2026‑45641 – Hyper‑V RCE
    • CVE‑2026‑45607 – Hyper‑V RCE
  • These bugs may enable guest escape and code execution on the Hyper‑V host, impacting multi‑tenant and tightly segmented virtualization deployments.
  • Core identity and infrastructure
    • CVE‑2026‑47291 – HTTP.sys RCE (network edge)
    • CVE‑2026‑47288 – Windows Kerberos KDC RCE (Active Directory)
    • CVE‑2026‑45648 – Active Directory Domain Services RCE
    • CVE‑2026‑32193 – Azure Kubernetes Service (AKS) RCE
    • CVE‑2026‑26142 – Nuance PowerScribe RCE (healthcare)
  • Microsoft Office and client‑side RCE: Multiple Critical CVEs in Outlook, Word, Excel, and Office core, including CVE‑2026‑45458, CVE‑2026‑45456, CVE‑2026‑45474, and CVE‑2026‑45472, are exploitable via malicious documents and email content.

These RCEs are particularly relevant for phishing‑driven intrusions, where initial code execution often comes from document or RDP abuse.

Privilege Escalation and Secure Boot Focus

Elevation of Privilege bugs dominate this cycle with 63 CVEs, many in core Windows components that attackers frequently chain post‑compromise. Key areas include:

  • Windows DWM Core Library – multiple EoP and info‑disclosure CVEs (e.g., CVE‑2026‑44813, CVE‑2026‑44811, CVE‑2026‑42983, CVE‑2026‑48566).
  • Windows Ancillary Function Driver for WinSock (AFD) – several EoP CVEs (CVE‑2026‑45638, CVE‑2026‑45603, CVE‑2026‑45601, CVE‑2026‑45598, CVE‑2026‑42911, CVE‑2026‑34335).
  • Windows Kernel and kernel‑mode drivers – including CVE‑2026‑48583, CVE‑2026‑45653, CVE‑2026‑45600, CVE‑2026‑42984, CVE‑2026‑42916.
  • Microsoft Cryptographic Services – CVE‑2026‑44810, a Critical EoP affecting a foundational crypto subsystem.

Microsoft also continues to harden pre‑OS integrity: Secure Boot and Windows Secure Boot receive multiple Security Feature Bypass fixes (for example, CVE‑2026‑48576, CVE‑2026‑48575, CVE‑2026‑48573, CVE‑2026‑48570, CVE‑2026‑45656, CVE‑2026‑45654, CVE‑2026‑45588). These patches aim to blunt boot-kit-style attacks that persist below the operating system.

List of all CVEs

CVE NumberCVE TitleImpact
CVE-2026-50508Windows NTLM Spoofing VulnerabilitySpoofing
CVE-2026-50507Windows BitLocker Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-49161Microsoft PC Manager Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-49160HTTP.sys Denial of Service VulnerabilityDenial of Service
CVE-2026-48583Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-48578Secure Boot Security Feature Bypass VulnerabilityElevation of Privilege
CVE-2026-48576Secure Boot Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-48575Secure Boot Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-48574Windows Media Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-48573Secure Boot Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-48570Secure Boot Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-48569Visual Studio Code Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-48568Secure Boot Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-48566Windows DWM Core Library Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-48565Windows Narrator Braille Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-48563Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-48562Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-48560Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-47656Windows Boot Manager Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-47654Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-47653Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-47652Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-47648Windows Storage Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-47643Azure Stack Edge Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-47641Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-47640Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-47639Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-47638Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-47637Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-47636Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-47635Microsoft Outlook and Word Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-47634Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-47631Microsoft Exchange Server Spoofing VulnerabilitySpoofing
CVE-2026-47298Microsoft SharePoint Server Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-47293Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-47292Visual Studio Code MSSQL Extension Remote Code Execution VulnerabilityElevation of Privilege
CVE-2026-47291HTTP.sys Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-47289Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-47288Windows Kerberos Key Distribution Center (KDC) Remote Code ExecutionRemote Code Execution
CVE-2026-47287Visual Studio Code Tampering VulnerabilityTampering
CVE-2026-47284Visual Studio Code Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-47281Visual Studio Code Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45658Windows BitLocker Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-45657Windows Kernel Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45656UEFI Secure Boot Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-45655Windows BitLocker Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-45654Secure Boot Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-45653Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45650Microsoft Bing Search Spoofing VulnerabilitySpoofing
CVE-2026-45649Office for Android Spoofing VulnerabilitySpoofing
CVE-2026-45648Windows Active Directory Domain Services Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45647Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45645Microsoft Office Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45644Microsoft Live Share Canvas SDK Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45643Microsoft Word Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45642Microsoft Azure Attestation Service Spoofing VulnerabilitySpoofing
CVE-2026-45641Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45640Windows Bluetooth Port Driver Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45639Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45638Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45637Microsoft DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45636Windows NTFS Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45635Windows UPnP Device Host Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45634Windows DHCP Client Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45608Windows DHCP Client Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45607Windows Hyper-V Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45606Microsoft UxTheme Library Denial of Service VulnerabilityDenial of Service
CVE-2026-45605Windows Bluetooth Service Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45604Windows Managed Installer Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45603Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45602Windows DHCP Tampering VulnerabilityTampering
CVE-2026-45601Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45600Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45599Windows UPnP Device Host Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45598Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45597Windows UI Automation Manager Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45596Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45595Windows Mark of the Web Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-45594Windows Application Identity (AppID) Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45593Windows SDK Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45592Windows Internet (wininet.dll) Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45591ASP.NET Core Denial of Service VulnerabilityDenial of Service
CVE-2026-45588Secure Boot Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-45586Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45583Microsoft Exchange Server Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45504Microsoft Exchange Server Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45503Microsoft Exchange Server Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45502Microsoft Exchange Server Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45501Microsoft Exchange Server Spoofing VulnerabilitySpoofing
CVE-2026-45500Microsoft Exchange Server Spoofing VulnerabilitySpoofing
CVE-2026-45491.NET Tampering VulnerabilityTampering
CVE-2026-45490.NET SDK Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45487Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45486Microsoft Word Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45485Microsoft Office Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45484Microsoft SharePoint Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45483Microsoft Office Project Server Spoofing VulnerabilitySpoofing
CVE-2026-45482Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-45481Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-45479Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-45476Microsoft Azure Network Adapter Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-45475Microsoft Office Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45474Microsoft Office Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45472Microsoft Office Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45471Microsoft Word Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45469Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45468Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-45467Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-45466Microsoft Word Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45465Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-45464Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-45463Microsoft Office Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45462Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-45461Microsoft Office Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45460Microsoft Office Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45459Microsoft Excel Security Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-45458Microsoft Outlook and Word Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45457Microsoft Word Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45456Microsoft Outlook and Word Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45455Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-45454Microsoft SharePoint Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-45453Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-44824Microsoft Office Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44823Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44822Microsoft Excel Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-44821Microsoft Office Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-44820Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44819Microsoft Office Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44818Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44817Microsoft Excel Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44815DHCP Client Service Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44814Windows DWM Core Library Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-44813Windows DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-44812Windows Graphics Component Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44811Windows DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-44810Microsoft Cryptographic Services Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-44809Windows Common Log File System Driver Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-44808Windows DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-44807Windows DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-44805Windows Network Controller Host Agent Denial of Service VulnerabilityDenial of Service
CVE-2026-44804Windows DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-44803Windows Graphics Component Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44802Windows DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-44801Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-44799Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-42993Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-42992Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-42991Windows Push Notifications Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42989Winlogon Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42987Windows Deployment Services (WDS) Remote Code ExecutionRemote Code Execution
CVE-2026-42986Microsoft Graphics Component Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42985Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-42984Windows Kernel Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42983Windows DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42981Windows Performance Monitor Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-42980NT OS Kernel Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42979Windows Push Notifications Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42978Windows Push Notifications Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42977Windows Push Notifications Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42974Windows Performance Monitor Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-42973Windows Push Notification Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42972Windows Hyper-V Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42971Windows Push Notification Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42970Windows Push Notification Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42969Windows Push Notification Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42968Windows Telephony Server Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42916NT OS Kernel Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42915Windows TCP/IP Denial of Service VulnerabilityDenial of Service
CVE-2026-42914Windows Kerberos Denial of Service VulnerabilityDenial of Service
CVE-2026-42913Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-42912Windows Telephony Service Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42911Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42910Windows Hotpatch Monitoring Service Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42909Remote Desktop Client Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-42908Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42907Windows Shell Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42906Windows Shell Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42905Windows DWM Core Library Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42904Windows TCP/IP Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42903Windows Kerberos Denial of Service VulnerabilityDenial of Service
CVE-2026-42902Microsoft PowerToys Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42837Windows Projected File System Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42836Windows Function Discovery Service Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-42835Microsoft Teams for Android Information Disclosure VulnerabilityInformation Disclosure
CVE-2026-42829Windows Administrator Protection Secure Feature Bypass VulnerabilitySecurity Feature Bypass
CVE-2026-42828Windows Projected File System Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-41108Windows DNS Client Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-41098Azure Stack Edge Spoofing VulnerabilitySpoofing
CVE-2026-41092Microsoft Kinect Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-40409Windows Universal Disk Format File System Driver Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-40404Windows Universal Disk Format File System Driver Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-40376Visual Studio Code Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-40371Microsoft Dynamics 365 (on-premises) Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-34335Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-33828Windows Device Health Attestation Elevation of Privilege VulnerabilityElevation of Privilege
CVE-2026-33113Microsoft SharePoint Server Spoofing VulnerabilitySpoofing
CVE-2026-32193Azure Kubernetes Service (AKS) Remote Code Execution VulnerabilityRemote Code Execution
CVE-2026-26142Nuance PowerScribe Remote Code Execution VulnerabilityRemote Code Execution

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago