windows patch tuesday

CVE-2026-50646 is a high-severity .NET vulnerability that can let an unauthorized attacker execute code on a Windows machine, but Microsoft’s published records disagree on whether administrators should classify it as remote code execution or elevation of privilege. The practical response is less...

Microsoft disclosed CVE-2026-42972 on June 9, 2026, as a Windows Hyper-V information disclosure vulnerability affecting supported Windows client and server releases, with public tracking pages describing a medium-severity flaw that requires local authorized access rather than remote...

Microsoft’s June 9, 2026 Patch Tuesday includes CVE-2026-45658, an Important-rated Windows BitLocker security feature bypass that Microsoft describes as a protection-mechanism failure allowing an unauthorized attacker to bypass a security feature through physical access to a device. The short...

Microsoft has confirmed a fresh wave of regressions tied to the January Patch Day security updates: some applications may stop responding or report errors when opening or saving files stored in cloud-synced locations such as OneDrive or Dropbox, Outlook Classic profiles that store PSTs on...