Microsoft Patches Record 206 Flaws Including Three Zero-Days and Critical RCE Bugs

Microsoft's June 2026 Patch Tuesday addresses 206 vulnerabilities across Windows, Office, Azure and other products, including three publicly disclosed zero-days, 39 critical-severity flaws (notably RCEs in RDS, SharePoint, and DNS) and a concentrated set of 63 privilege escalation issues. The report urges organizations to prioritize patching of zero-days and internet-facing RCEs within 24–48 hours, follow testing guidance for domain controllers and critical services, and treat privilege-escalation fixes as high priority due to their role in post-exploitation chains.