Microsoft · Security update · June 9, 2026

KB5094042: June 2026 security update

KB5094042, released June 9, 2026, fixes 60 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
60
12 rated Critical
Exploited
0
None reported
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.2530
97th percentile

Priority of the 60 CVEs

Patch now 0 Urgent 18 High 33 Routine 9

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-47291 Windows HTTP.sys Remote Code Execution 9.8 0.2530 More likely
Urgent CVE-2026-50508 Windows NTLM Spoofing 6.5 0.1144 More likely
Urgent CVE-2026-45586 Windows Collaborative Translation Framework Elevation of Privilege 7.8 0.0363 DisclosedMore likely
Urgent CVE-2026-42989 Winlogon Elevation of Privilege 7.8 0.0227 More likely
Urgent CVE-2026-42905 Windows DWM Core Library Elevation of Privilege 7.8 0.0200 More likely
Urgent CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege 7.8 0.0200 More likely
Urgent CVE-2026-42985 Remote Desktop Client Remote Code Execution 8.8 0.0126 More likely
Urgent CVE-2026-44815 Windows DHCP Client Remote Code Execution 9.8 0.0110 Exploitation Less Likely
Urgent CVE-2026-47289 Remote Desktop Client Remote Code Execution 8.8 0.0095 Exploitation Less Likely
Urgent CVE-2026-48564 Windows DHCP Server Remote Code Execution 8.8 0.0091 Exploitation Less Likely
Urgent CVE-2026-42987 Windows Deployment Services Remote Code Execution 8.1 0.0059 Exploitation Less Likely
Urgent CVE-2026-44803 Windows Win32K - GRFX Remote Code Execution 7.8 0.0052 More likely
Urgent CVE-2026-44812 Windows Win32K - GRFX Remote Code Execution 7.8 0.0052 More likely
Urgent CVE-2026-47288 Windows Kerberos Remote Code Execution 7.1 0.0050 Exploitation Unlikely
Urgent CVE-2026-44799 Remote Desktop Client Remote Code Execution 7.5 0.0046 Exploitation Less Likely
Urgent CVE-2026-44801 Remote Desktop Client Remote Code Execution 7.5 0.0046 Exploitation Less Likely
Urgent CVE-2026-48574 Windows Media Remote Code Execution 7.8 0.0045 Exploitation Less Likely
Urgent CVE-2026-45658 Windows BitLocker Security Feature Bypass 7.8 0.0035 More likely
High CVE-2026-48573 Windows Secure Boot Security Feature Bypass 7.9 0.0103 Exploitation Less Likely
High CVE-2026-48576 Windows Secure Boot Security Feature Bypass 7.9 0.0103 Exploitation Less Likely
High CVE-2026-42990 SQL Server ODBC driver Remote Code Execution 9.8 0.0097 Exploitation Unlikely
High CVE-2026-42908 Windows RDP Information Disclosure 7.5 0.0087 Exploitation Less Likely
High CVE-2026-45639 Windows RDP Information Disclosure 7.5 0.0087 Exploitation Less Likely
High CVE-2026-47653 Remote Desktop Client Remote Code Execution 8.8 0.0060 Exploitation Unlikely
High CVE-2026-45635 Universal Plug and Play (upnp.dll) Remote Code Execution 8.1 0.0056 Exploitation Less Likely
Showing 1 to 25 of 60 1Next