Microsoft's security release of 9 June 2026
Patch Tuesday, June 2026, page 2
As of , CISA lists none of the 200 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first by our order: CVE-2026-42980, NT OS Kernel Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2026-40409Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 102 | CVE-2026-41092Microsoft Kinect Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 103 | CVE-2026-42828Windows Projected File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 104 | CVE-2026-42829Windows Administrator Protection Secure Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 105 | CVE-2026-42837Windows Projected File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 106 | CVE-2026-42902Microsoft PowerToys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 107 | CVE-2026-42905Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 108 | CVE-2026-42910Windows Hotpatch Monitoring Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 109 | CVE-2026-42916NT OS Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 110 | CVE-2026-42977Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 111 | CVE-2026-42978Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 112 | CVE-2026-42979Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 113 | CVE-2026-42983Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 114 | CVE-2026-42986Microsoft Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 115 | CVE-2026-42989Winlogon Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 116 | CVE-2026-42991Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 117 | CVE-2026-44802Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 118 | CVE-2026-44803Windows Graphics Component Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 119 | CVE-2026-44804Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 120 | CVE-2026-44807Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 121 | CVE-2026-44808Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 122 | CVE-2026-44809Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 123 | CVE-2026-44811Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 124 | CVE-2026-44812Windows Graphics Component Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 125 | CVE-2026-44813Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 126 | CVE-2026-44817Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 127 | CVE-2026-44820Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 128 | CVE-2026-44823Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 129 | CVE-2026-45457Microsoft Word Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 130 | CVE-2026-45469Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 131 | CVE-2026-45486Microsoft Word Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 132 | CVE-2026-45487Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 133 | CVE-2026-45490.NET SDK Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 134 | CVE-2026-45586Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 135 | CVE-2026-45592Windows Internet (wininet.dll) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 136 | CVE-2026-45593Windows SDK Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 137 | CVE-2026-45600Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 138 | CVE-2026-45605Windows Bluetooth Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 139 | CVE-2026-45636Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 140 | CVE-2026-45637Microsoft DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 141 | CVE-2026-45638Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 142 | CVE-2026-45643Microsoft Word Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 143 | CVE-2026-45645Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 144 | CVE-2026-45656UEFI Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 145 | CVE-2026-45658Windows BitLocker Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 146 | CVE-2026-47292Visual Studio Code MSSQL Extension Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 147 | CVE-2026-48565Windows Narrator Braille Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 148 | CVE-2026-48574Windows Media Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 149 | CVE-2026-48583Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 150 | CVE-2026-49161Microsoft PC Manager Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 151 | CVE-2026-50511Microsoft PC Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 152 | CVE-2026-50512Microsoft PC Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 153 | CVE-2026-42909Remote Desktop Client Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 154 | CVE-2026-42913Remote Desktop Client Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 155 | CVE-2026-45649Office for Android Spoofing | None | Not on CISA's list | 7.1 High | 0.00 |
| 156 | CVE-2026-47288Windows Kerberos Key Distribution Center (KDC) Remote Code Execution | None | Not on CISA's list | 7.1 High | 0.00 |
| 157 | CVE-2026-48569Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 7.1 High | 0.00 |
| 158 | CVE-2026-34335Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 159 | CVE-2026-41108Windows DNS Client Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 160 | CVE-2026-42836Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 161 | CVE-2026-42911Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 162 | CVE-2026-42912Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 163 | CVE-2026-42984Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 164 | CVE-2026-44818Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 165 | CVE-2026-45596Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 166 | CVE-2026-45597Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 167 | CVE-2026-45598Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 168 | CVE-2026-45601Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 169 | CVE-2026-45603Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 170 | CVE-2026-45640Windows Bluetooth Port Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 171 | CVE-2026-45653Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 172 | CVE-2026-47293Microsoft Office Click-To-Run Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 173 | CVE-2026-47648Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 174 | CVE-2026-45608Windows DHCP Client Information Disclosure | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 175 | CVE-2026-50507Windows BitLocker Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 176 | CVE-2026-45501Microsoft Exchange Server Spoofing | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 177 | CVE-2026-45491.NET Tampering | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 178 | CVE-2026-45500Microsoft Exchange Server Spoofing | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 179 | CVE-2026-42906Windows Shell Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 180 | CVE-2026-42915Microsoft Windows VMSwitch Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 181 | CVE-2026-42968Windows Telephony Server Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 182 | CVE-2026-42969Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 183 | CVE-2026-42970Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 184 | CVE-2026-42971Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 185 | CVE-2026-42972Windows Hyper-V Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 186 | CVE-2026-42973Windows Push Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 187 | CVE-2026-44805Windows Network Controller (NC) Host Agent Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 188 | CVE-2026-44814Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 189 | CVE-2026-45594Windows Application Identity (AppID) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 190 | CVE-2026-45604Windows Managed Installer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 191 | CVE-2026-45606Microsoft UxTheme Library (uxtheme.dll) Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 192 | CVE-2026-45634Windows DHCP Client Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 193 | CVE-2026-45647Microsoft Defender for Endpoint for Mac Elevation of Privilege | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 194 | CVE-2026-48566Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 195 | CVE-2026-45595Windows Mark of the Web Security Feature Bypass | None | Not on CISA's list | 5.4 Medium | 0.00 |
| 196 | CVE-2026-45655Windows BitLocker Security Feature Bypass | None | Not on CISA's list | 5.3 Medium | 0.00 |
| 197 | CVE-2026-45460Microsoft Office Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 198 | CVE-2026-45642Microsoft Azure Attestation service and Device Health Attestation Service Spoofing | None | Not on CISA's list | 3.9 Low | 0.00 |
| 199 | CVE-2026-45459Microsoft Excel Security Feature Bypass | None | Not on CISA's list | 3.3 Low | 0.00 |
| 200 | CVE-2026-45466Microsoft Word Information Disclosure | None | Not on CISA's list | 3.3 Low | 0.00 |