Microsoft releases record June Patch Tuesday with 208 CVEs

Microsoft has released its largest-ever monthly batch of security updates, addressing a record-breaking number of vulnerabilities across its product ecosystem in its June 2026 Patch Tuesday release. The company issued fixes for 208 unique flaws in its own software, with the total number of vulnerabilities, including those in third-party components like Chromium, reaching 571. This surpasses the previous monthly record of 177 set in October 2025.

Among the hundreds of patches, four vulnerabilities have been prioritized due to active exploitation or public disclosure. One, tracked as CVE-2026-41091, is an elevation of privilege flaw in Microsoft Defender that is confirmed to be under active attack. Microsoft released an out-of-band patch for this issue on May 19. The other three were publicly known before the June 10 patch release but are not yet known to have been exploited in attacks. Microsoft has assessed all three as "more likely" to be exploited.

These publicly disclosed vulnerabilities include CVE-2026-45586, a privilege escalation flaw in the Windows Collaborative Translation Framework that could allow a local, authenticated attacker to gain system-level control. Another,...