Patch Tuesday Dashboard

Assurance Security Dashboard: June 2026 Patch Tuesday

June 2026 Assurance Security Dashboard infographic: 203 CVEs across Windows, Browser, Developer Tools, Office, Exchange and SQL Server with 33 Critical and 3 zero-day flag(s)

Microsoft’s June 2026 Patch Tuesday addresses 203 CVEs across the June security release. The infographic above summarises severity and risk level by product family; the prose below unpacks the items that need attention this cycle. 3 CVEs carry a zero-day flag (publicly disclosed and/or being exploited in the wild).

June 2026 Patch Tuesday: updates by product family

  • Windows - 22 Critical, 98 Important, top CVSS 9.8. Action: Patch Now.
  • Browsers - 1 Critical, top CVSS 6.5. Action: Patch Now.
  • Development - 11 Important, top CVSS 9.6. Action: Schedule.
  • Office - 10 Critical, 44 Important, top CVSS 8.8. Action: Patch Now.
  • Exchange - no updates this month.
  • SQL Server - no updates this month.

Notable CVEs this cycle

  • CVE-2026-45586 (Windows) - Publicly Disclosed, CVSS 7.8.
  • CVE-2026-49160 (Windows) - Publicly Disclosed, CVSS 7.5.
  • CVE-2026-50507 (Windows) - Publicly Disclosed, CVSS 6.8.

Patch now: Windows, Browsers, Office. Critical-rated or actively exploited vulnerabilities drive these into the immediate-action queue.

Schedule: Development. Important-rated vulnerabilities to roll into the regular monthly update cycle.

Every patch, every platform change, every application update is a risk-based decision under uncertainty. Readiness Assurance turns that uncertainty into prescriptive guidance - where applications are scanned, tested, documented, and delivered with certainty into production.