June 2026 Patch Tuesday: Microsoft Patches 206 Vulnerabilities Including Three Publicly Disclosed Zero-Days

This bulletin summarizes multiple publicly disclosed vulnerabilities addressed in the latest Patch Tuesday cycle, including numerous Critical RCEs and elevation-of-privilege flaws across Windows kernel/HTTP.sys, Active Directory, Hyper-V, Remote Desktop Client, Office, Azure services, and third-party software (e.g., Nuance PowerScribe). Several issues are high-severity (CVSS up to 10.0), some have proof-of-concept code or are assessed as likely to be exploited, and Microsoft has proactively remediated certain cloud-hosted services while urging customers to apply patches and mitigations where action is required.