Microsoft patches record 198 Windows bugs in June update - and 3 are zero days

2026-06-10 · Source: News and Advice on the World's Latest Innovations | ZDNET · Field: Technology & Digital — Cybersecurity & Data Privacy, Cloud Computing & IT Infrastructure, Emerging Technologies & Innovation · Depth: Novice, short

Summary

Microsoft's June 2026 Patch Tuesday update addresses a record 198 security vulnerabilities, marking the largest volume in recent history. This extensive patch includes 32 critical flaws and three publicly disclosed zero-day vulnerabilities: CVE-2026-45586, which could grant Windows System privileges; CVE-2026-49160, an HTTP vulnerability enabling denial-of-service attacks; and CVE-2026-50507, a BitLocker flaw allowing encrypted data capture with physical access. The rapid identification of these bugs is attributed to AI-assisted analysis, utilizing models like Anthropic's Claude Mythos. Additionally, the update introduces several new Windows 11 features, such as a Low Latency Profile for faster actions, support for shared audio devices, multi-app webcam functionality, and the ability to set custom user folder names during setup.

Key takeaway

For IT professionals managing Windows environments, promptly installing Microsoft's June 2026 Patch Tuesday update is critical. With a record 198 vulnerabilities patched, including 32 critical flaws and three publicly disclosed zero-days, your systems face elevated risk if unpatched. Ensure all Windows 10 and 11 machines complete the update and reboot, as these zero-days could be exploited on unpatched PCs. Verify Windows 10 devices are enrolled in the ESU program to receive these essential security fixes.

Key insights

AI-assisted analysis, exemplified by Claude Mythos, dramatically accelerates vulnerability discovery and patching in software.

Principles

• AI-assisted analysis enhances the speed of vulnerability detection.
• Publicly disclosed zero-day flaws demand urgent patching to mitigate risk.

Method

Tech companies are employing AI models, such as Anthropic's Claude Mythos, to identify and resolve software vulnerabilities at an accelerated rate.

In practice

• Windows 11 now supports shared Bluetooth audio devices.
• Webcams can simultaneously operate with multiple applications.

Topics

• Microsoft Patch Tuesday
• Windows Security Updates
• Zero-Day Vulnerabilities
• AI-Assisted Security
• Windows 11 Features
• Cybersecurity

Best for: CTO, VP of Engineering/Data, IT Professional, Security Engineer, General Interest

Related on AIssential

• How a malicious link could bypass your PC’s built-in SmartScreen — Zero-day vulnerabilities in Windows and Office are under active exploitation, bypassing built-in security features like SmartScreen.
• AI turns patches into working exploits in 30 minutes, and the 90-day disclosure window is the casualty — AI language models accelerate vulnerability discovery and exploit generation, invalidating traditional 90-day disclosure policies.
• Hackers are abusing unpatched Windows security flaws to hack into organizations — Public disclosure of Windows Defender exploits by a disgruntled researcher led to active exploitation by hackers.
• Your PC's critical security certificates may be about to expire - how to check — Expiring 2011 Secure Boot certificates require updates to maintain PC security and boot functionality by June 2026.
• Adobe issues emergency fix for Acrobat and Reader DC prototype flaw — Adobe has released an emergency patch for a zero-day vulnerability, tracked as CVE-2026-34621, affecting Acrobat DC, Reader DC, and Acrobat 2024, which hackers exploited for at least four months.
• GitLab Patch Release: 19.0.1, 18.11.4, 18.10.7 — GitLab patch releases 19.0.1, 18.11.4, 18.10.7 contain critical security and bug fixes, necessitating immediate self-managed upgrades.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by News and Advice on the World's Latest Innovations | ZDNET.