# Security updates released in June 2026

- Web page: https://patchblox.com/security/patch-radar/2026/06

| Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now |
|---|---:|---:|---:|---:|
| Microsoft | 28 | 232 | 3 | 3 |
| macOS | 1 | 30 | 0 | 0 |
| Linux | 5,805 | 3,739 | 19 | 19 |

## Patch Tuesday, June 9, 2026

246 CVEs, 30 Critical, 0 exploited, 3 publicly disclosed, in 28 security updates.

## Microsoft products with the most CVEs fixed

| Product | CVEs | Exploited | Patch now |
|---|---:|---:|---:|
| Windows 11 | 169 | 0 | 0 |
| Windows 10 | 142 | 0 | 0 |
| Windows Server | 107 | 0 | 0 |
| SharePoint Server | 31 | 1 | 1 |
| Microsoft Office | 20 | 0 | 0 |
| Exchange Server | 11 | 0 | 0 |
| .NET and Visual Studio | 3 | 0 | 0 |

## Microsoft updates

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [KB5002873](https://patchblox.com/security/data/fix/microsoft/kb5002873.md) | Microsoft SharePoint Server Subscription Edition | Jun 9, 2026 | Patch now | 31 | 1 | CVE-2026-58644 |
| [KB5002874](https://patchblox.com/security/data/fix/microsoft/kb5002874.md) | Microsoft SharePoint Server 2019 | Jun 9, 2026 | Patch now | 31 | 1 | CVE-2026-58644 |
| [KB5002880](https://patchblox.com/security/data/fix/microsoft/kb5002880.md) | Microsoft SharePoint Enterprise Server 2016 | Jun 9, 2026 | Patch now | 30 | 1 | CVE-2026-58644 |
| [KB5093998](https://patchblox.com/security/data/fix/microsoft/kb5093998.md) | Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems and 1 more | Jun 9, 2026 | Urgent | 152 | 0 | CVE-2026-49160 |
| [KB5094127](https://patchblox.com/security/data/fix/microsoft/kb5094127.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 4 more | Jun 9, 2026 | Urgent | 142 | 0 | CVE-2026-49160 |
| [KB5095051](https://patchblox.com/security/data/fix/microsoft/kb5095051.md) | Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems | Jun 9, 2026 | Urgent | 112 | 0 | CVE-2026-49160 |
| [KB5094125](https://patchblox.com/security/data/fix/microsoft/kb5094125.md) | Windows Server 2025, Windows Server 2025 (Server Core installation) | Jun 9, 2026 | Urgent | 103 | 0 | CVE-2026-49160 |
| [KB5094126](https://patchblox.com/security/data/fix/microsoft/kb5094126.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 3 more | Jun 9, 2026 | Urgent | 101 | 0 | CVE-2026-49160 |
| [KB5094128](https://patchblox.com/security/data/fix/microsoft/kb5094128.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Jun 9, 2026 | Urgent | 99 | 0 | CVE-2026-49160 |
| [KB5094123](https://patchblox.com/security/data/fix/microsoft/kb5094123.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Jun 9, 2026 | Urgent | 84 | 0 | CVE-2026-49160 |
| [KB5094122](https://patchblox.com/security/data/fix/microsoft/kb5094122.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Jun 9, 2026 | Urgent | 72 | 0 | CVE-2026-49160 |
| [KB5094041](https://patchblox.com/security/data/fix/microsoft/kb5094041.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Jun 9, 2026 | Urgent | 63 | 0 | CVE-2026-47291 |
| [KB5094042](https://patchblox.com/security/data/fix/microsoft/kb5094042.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Jun 9, 2026 | Urgent | 60 | 0 | CVE-2026-47291 |
| [KB5103212](https://patchblox.com/security/data/fix/microsoft/kb5103212.md) | Microsoft Exchange Server Subscription Edition RTM | Jun 9, 2026 | Urgent | 11 | 0 | CVE-2026-55008 |
| [KB5103213](https://patchblox.com/security/data/fix/microsoft/kb5103213.md) | Microsoft Exchange Server 2019 Cumulative Update 15 | Jun 9, 2026 | Urgent | 11 | 0 | CVE-2026-55008 |
| [KB5103214](https://patchblox.com/security/data/fix/microsoft/kb5103214.md) | Microsoft Exchange Server 2019 Cumulative Update 14 | Jun 9, 2026 | Urgent | 11 | 0 | CVE-2026-55008 |
| [KB5103215](https://patchblox.com/security/data/fix/microsoft/kb5103215.md) | Microsoft Exchange Server 2016 Cumulative Update 23 | Jun 9, 2026 | Urgent | 11 | 0 | CVE-2026-55008 |
| [KB5002878](https://patchblox.com/security/data/fix/microsoft/kb5002878.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Jun 9, 2026 | Urgent | 9 | 0 | CVE-2026-45461 |
| [KB5002876](https://patchblox.com/security/data/fix/microsoft/kb5002876.md) | Microsoft SharePoint Server 2019 | Jun 9, 2026 | Urgent | 8 | 0 | CVE-2026-45458 |
| [KB5002881](https://patchblox.com/security/data/fix/microsoft/kb5002881.md) | Microsoft SharePoint Enterprise Server 2016 | Jun 9, 2026 | Urgent | 8 | 0 | CVE-2026-45458 |
| [KB5002879](https://patchblox.com/security/data/fix/microsoft/kb5002879.md) | Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | Jun 9, 2026 | Urgent | 3 | 0 | CVE-2026-45458 |
| [KB5097148](https://patchblox.com/security/data/fix/microsoft/kb5097148.md) | .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows and 1 more | Jun 9, 2026 | High | 3 | 0 | CVE-2026-45591 |
| [KB5097149](https://patchblox.com/security/data/fix/microsoft/kb5097149.md) | .NET 8.0, .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS and 2 more | Jun 9, 2026 | High | 3 | 0 | CVE-2026-45591 |
| [KB5097150](https://patchblox.com/security/data/fix/microsoft/kb5097150.md) | .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows and 1 more | Jun 9, 2026 | High | 3 | 0 | CVE-2026-45591 |
| [KB5002875](https://patchblox.com/security/data/fix/microsoft/kb5002875.md) | Office Online Server | Jun 9, 2026 | High | 7 | 0 | CVE-2026-44822 |
| [KB5002877](https://patchblox.com/security/data/fix/microsoft/kb5002877.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Jun 9, 2026 | High | 7 | 0 | CVE-2026-44822 |
| [KB5002852](https://patchblox.com/security/data/fix/microsoft/kb5002852.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Jun 9, 2026 | High | 1 | 0 | CVE-2026-45645 |
| [KB5094006](https://patchblox.com/security/data/fix/microsoft/kb5094006.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Jun 9, 2026 | High | 1 | 0 | CVE-2026-45592 |

## macOS updates

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [Tahoe 26.5.2](https://patchblox.com/security/data/fix/macos/tahoe-26.5.2.md) | Tahoe | Jun 29, 2026 | Urgent | 30 | 0 | CVE-2026-43807 |

## Linux, by distribution

| Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now |
|---|---:|---:|---:|---:|
| Ubuntu | 2,361 | 284 | 0 | 0 |
| Debian | 1,991 | 1,991 | 3 | 3 |
| sles | 262 | 898 | 12 | 12 |
| Red Hat | 241 | 510 | 2 | 2 |
| rocky | 227 | 382 | 0 | 0 |
| almalinux | 217 | 303 | 0 | 0 |
| ol | 191 | 438 | 1 | 1 |
| opensuse-leap | 163 | 678 | 1 | 1 |
| amzn | 123 | 657 | 0 | 0 |
| Fedora | 29 | 78 | 0 | 0 |

## Most urgent Linux advisories

| Fix | Products | Released | Priority | CVEs | Exploited | Top CVE |
|---|---|---|---|---:|---:|---|
| [RHSA-2026:71326](https://patchblox.com/security/data/fix/linux/rhsa-2026-71326.md) | kernel on RHEL 10 | Jun 1, 2026 | Patch now | 2 | 2 | CVE-2025-39964 |
| [SUSE-SU-2026:22151-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22151-1.md) | python-starlette on sles 16.0 | Jun 17, 2026 | Patch now | 3 | 1 | CVE-2026-48710 |
| [OPENSUSE-SU-2026:20975-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20975-1.md) | python-starlette on opensuse-leap 16.0 | Jun 17, 2026 | Patch now | 3 | 1 | CVE-2026-48710 |
| [DEBIAN-CVE-2026-48710](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48710.md) | starlette on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14 | Jun 24, 2026 | Patch now | 1 | 1 | CVE-2026-48710 |
| [SUSE-SU-2026:2238-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2238-1.md) | kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7 | Jun 30, 2026 | Patch now | 204 | 1 | CVE-2026-46300 |
| [ELSA-2026-19568](https://patchblox.com/security/data/fix/linux/elsa-2026-19568.md) | kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9 | Jun 29, 2026 | Patch now | 10 | 1 | CVE-2026-46300 |
| [SUSE-SU-2026:22040-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22040-1.md) | kernel-livepatch-SLE16_Update_5 on sles 16.0 | Jun 2, 2026 | Patch now | 6 | 1 | CVE-2026-46300 |
| [SUSE-SU-2026:22039-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22039-1.md) | kernel-livepatch-SLE16_Update_0 on sles 16.0 | Jun 2, 2026 | Patch now | 6 | 1 | CVE-2026-46300 |
| [SUSE-SU-2026:22038-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22038-1.md) | kernel-livepatch-SLE16_Update_2 on sles 16.0 | Jun 2, 2026 | Patch now | 6 | 1 | CVE-2026-46300 |
| [SUSE-SU-2026:22033-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22033-1.md) | kernel-livepatch-SLE16_Update_4 on sles 16.0 | Jun 1, 2026 | Patch now | 6 | 1 | CVE-2026-46300 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
