{"id":477294,"date":"2026-06-05T07:29:09","date_gmt":"2026-06-05T07:29:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/477294\/"},"modified":"2026-06-05T07:29:09","modified_gmt":"2026-06-05T07:29:09","slug":"june-2026-patch-tuesday-forecast-where-are-the-cves","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/477294\/","title":{"rendered":"June 2026 Patch Tuesday forecast: Where are the CVEs?"},"content":{"rendered":"

My forecast from last month<\/a> was only partly right. After the Anthropic Mythos<\/a> announcements and the deluge of newly discovered vulnerabilities from vendors like Mozilla, Microsoft\u2019s updates were standard fare, 65 CVEs reported in Windows 11 and 58 in Windows 10. <\/p>\n

The Microsoft Office releases were a bit higher with 19 CVEs or so reported for the online versions. Apple did indeed release their OS security updates the day before Patch Tuesday, which garnered some attention, and helped with a combined Windows and macOS set of deployments. The good news, with the exception of a minor Windows 11 problem, is that it all passed normally without a lot of reported issues in the following days.<\/p>\n

\"June<\/p>\n

Microsoft Defender blocks newly exploited RedSun and UnDefend threats<\/p>\n

Microsoft only had one major out-of-band release since May Patch Tuesday<\/a>. A May 21st release addressed CVE-2026-45659<\/a>, a remote code execution vulnerability in Windows SharePoint Server. Three KBs covered SharePoint Enterprise Server 2016, Server 2019 and Server Subscription Edition. This vulnerability carries a CVSS of 8.8 and is not known to be publicly disclosed or exploited at this point. <\/p>\n

The fix will be rolled into the June Patch Tuesday release. The June Patch Tuesday release will contain a fix for the failures and errors when installing KB5089549<\/a> for Windows 11. Microsoft acknowledged \u201cthis issue occurs on devices that have limited free space on the EFI System Partition (ESP), especially if it has 10 MB or less available.\u201d<\/p>\n

Last month I mentioned the Microsoft Defender exploit Bluehammer was fixed with a zero-day update on April Patch Tuesday. Fixes for two additional exploits, RedSun associated with CVE-2026-41091<\/a> and UnDefend with CVE-2026-45498, were released and dynamically updated the malware protection engine in Microsoft Defender on May 19th. <\/p>\n

There was some controversy surrounding these vulnerabilities because their disclosure was made with proof-of-concept code and they were quickly exploited by threat actors. Regardless, ensure you have Microsoft Defender enabled and that it has updated to the latest version. <\/p>\n

Microsoft launches Driver Quality Initiative<\/p>\n

Microsoft reported exploitation of CVE-2026-42897<\/a>, a spoofing vulnerability rated Critical in Microsoft Exchange Server. It carries a CVSS of 8.1. This is a cross-site scripting issue within Outlook Web Access. There is no patch for the vulnerability at this time but per Microsoft, \u201cthe Exchange Emergency Mitigation Service will provide mitigation automatically, and is on by default.\u201d Make sure to check your configuration and confirm the service is enabled so you are protected from the known active threats.<\/p>\n

This month, Microsoft held their first Windows Hardware Engineering Conference (WinHEC 2026) since 2018. At the conference they introduced the new Driver Quality Initiative<\/a> project. Per the article, they want to \u201cfundamentally raise the bar on driver quality, reliability and security across Windows.\u201d A positive user experience is based on hardware devices, drivers and software working together smoothly and Microsoft emphasized this requires a partnership between hardware and software vendors. <\/p>\n

With this project, Microsoft will be working closely with its partners by providing tools and utilities to raise driver quality. This looks to be an interesting initiative and we\u2019ll have to watch how it evolves and its impact on the user experience.<\/p>\n

June 2026 Patch Tuesday forecast<\/p>\n

Expect the standard Microsoft OS, Office and SharePoint updates. Be on the lookout for an Exchange Server update to address the reported exploited vulnerability CVE-2026-42897.
\nThe Adobe rotation for Creative Cloud Apps updates will most likely contain inCopy, inDesign, Photoshop, and perhaps Acrobat depending on which vulnerabilities have surfaced.
\nApple\u2019s security update on May 11th covered all their operating systems and Safari. Based on their release schedule, we shouldn\u2019t see anything new next week.
\nGoogle Chrome 150 was released into the beta channel this week so we should see the final Desktop version on Patch Tuesday.
\nMozilla released Firefox 151.0.3 this week addressing two vulnerabilities rated High. I expect corresponding Thunderbird, Thunderbird ESR, and Firefox ESR updates either before or on Patch Tuesday. Mozilla has accelerated some of their releases to once a week for the past several weeks.
\nOracle has announced they will be providing security updates<\/a> on the months between their quarterly Critical Product Updates. The Critical Security Patch Update Advisory<\/a>, May 2026 was recently announced.<\/p>\n

Microsoft didn\u2019t have many new patches to release throughout the month despite a lot of company activity I reported. We\u2019ll have to wait and see if the AI tools discover more issues and if the reported CVEs increase this month.<\/p>\n","protected":false},"excerpt":{"rendered":"My forecast from last month was only partly right. After the Anthropic Mythos announcements and the deluge of…\n","protected":false},"author":2,"featured_media":477295,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[11379,1463,670,85,46,221443,134,82403,545,9126,125],"class_list":["post-477294","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-adobe","tag-anthropic","tag-apple","tag-il","tag-israel","tag-ivanti","tag-microsoft","tag-mozilla","tag-opinion","tag-oracle","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/477294","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=477294"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/477294\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/477295"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=477294"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=477294"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=477294"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}