Microsoft June 2026 Patch Tuesday Fixes 206 Flaws and 3 Zero-Days

Microsoft’s June 2026 Patch Tuesday addresses 206 security bugs — including 33 critical vulnerabilities and three publicly disclosed zero-day flaws — impacting Windows components such as the kernel, HTTP.sys, NTFS, Hyper-V, BitLocker, CTFMON, and Exchange Server; several flaws are CVSS 9.8 and include remote DoS, privilege escalation, and security feature bypasses. The report highlights active exploitation of zero-days (e.g., HTTP.sys DoS, CTFMON privilege escalation, BitLocker bypass), widespread affected platforms (Windows 10/11 and Server 2012–2025), and advises administrators to prioritize patching identity controllers, remote tools, and internet-facing systems immediately.