windows security

Microsoft published CVE-2026-48566 on June 9, 2026, as an Important-rated Windows DWM Core Library information disclosure vulnerability, addressed in the June Patch Tuesday updates for supported Windows client and server systems through the normal cumulative update channel. The bug is not the...

Microsoft disclosed CVE-2026-48563 on June 9, 2026, as a Critical remote code execution vulnerability in the Windows Remote Desktop Client, part of a June Patch Tuesday release that also included multiple other Remote Desktop Client flaws across supported Windows releases. The headline is not...

Microsoft has listed CVE-2026-47653 as a Remote Desktop Client remote code execution vulnerability in its Security Update Guide, published for Windows administrators tracking the June 9, 2026 security release, but the public advisory currently exposes more risk signaling than deep root-cause...

Microsoft listed CVE-2026-8863 on June 9, 2026, as a UEFI Secure Boot security feature bypass vulnerability in its Security Update Guide, with the public entry emphasizing confidence in the vulnerability’s existence rather than publishing deep technical exploitation details. That distinction...

Microsoft published CVE-2026-47648, a Windows Storage elevation-of-privilege vulnerability, in its Security Update Guide on June 9, 2026, identifying the issue as a Windows flaw that can allow privilege escalation while assigning high confidence to the existence of the vulnerability and its...

Microsoft disclosed CVE-2026-45588 on June 9, 2026, as an Important-rated Windows Secure Boot security feature bypass affecting supported Windows client and server releases, with official fixes published for Windows 10, Windows 11, Windows Server 2012 through 2025, and related Server Core...

Microsoft disclosed CVE-2026-45634 on June 9, 2026, as an Important-rated Windows DHCP Client information disclosure vulnerability affecting supported Windows client and server releases, with official fixes issued through the June security updates and no public disclosure or exploitation...

Microsoft disclosed CVE-2026-45606 on June 9, 2026, as a denial-of-service vulnerability in the Windows UxTheme Library, uxtheme.dll, caused by an out-of-bounds read that a local authorized attacker could use to disrupt service. The score is not headline-grabbing: CVSS 5.5, “Important,” local...

CVE-2026-45640 is a Microsoft-tracked Windows Bluetooth Port Driver elevation-of-privilege vulnerability disclosed through the Microsoft Security Response Center, affecting the Windows Bluetooth stack and carrying the practical risk that an already positioned attacker could gain higher local...

Microsoft disclosed CVE-2026-45487 on June 9, 2026, as a Windows Program Compatibility Assistant Service elevation-of-privilege vulnerability, a local Windows flaw whose public advisory emphasizes confidence in the bug’s existence while withholding the kind of root-cause detail defenders and...

Anthropic launched Claude Fable 5 on June 9, 2026, making its first Mythos-class model broadly available through the Claude API while routing high-risk cybersecurity, biology, chemistry, and model-distillation requests to the less capable Claude Opus 4.8 model instead. The move is less a normal...

Microsoft disclosed CVE-2026-44821 on June 9, 2026, as an Important-rated Microsoft Office information disclosure vulnerability caused by an out-of-bounds read that can let an unauthorized local attacker expose small portions of heap memory after convincing a user to open a malicious Office...

Microsoft disclosed CVE-2026-33828 on June 9, 2026, as a critical Windows Device Health Attestation elevation-of-privilege vulnerability that can let a locally authorized attacker cross a trust boundary and gain SYSTEM privileges on affected Windows clients and servers. The oddity is not the...

Microsoft disclosed CVE-2026-40404 on June 9, 2026, as a Windows Universal Disk Format File System Driver elevation-of-privilege vulnerability affecting supported Windows systems through the UDFS component that parses and mounts UDF-formatted media and images. The dry title hides the important...

Microsoft disclosed CVE-2026-40409 on June 9, 2026, as an elevation-of-privilege vulnerability in the Windows Universal Disk Format File System Driver, the kernel component that lets Windows mount and interpret UDF-formatted optical and removable media across supported client and server...

Microsoft turned the June 9, 2026 Windows security release for hotpatch-capable Windows 11 Enterprise LTSC 2024 devices into a restart-required baseline update, replacing the expected hotpatch because CVE-2026-45585 was publicly disclosed outside normal coordinated vulnerability disclosure...

Windows 11 Pro security alerts usually come from the Windows Security app, Microsoft Defender Antivirus, SmartScreen, or Smart App Control, and they are meant to push users toward a specific next action: re-enable protection, quarantine a file, review a blocked download, or stop an untrusted app...

Microsoft’s 2011 Secure Boot certificate family begins expiring in June 2026, and the most consequential deadline is the Microsoft Corporation KEK CA 2011, whose replacement determines whether affected Windows devices can keep receiving future Secure Boot database and revocation updates. The...

:)

Gizmodo’s June 2026 “Best VPN for OnlyFans” guide names NordVPN, ExpressVPN, Private Internet Access, Proton VPN, and Surfshark as its top choices for accessing OnlyFans from restricted regions or privacy-sensitive networks. The more important story is not which subscription wins a speed test...