Multiple CVEs Addressed in June 2026 Security Updates
Severity: Medium (Score: 45.8)
Sources: Api.Msrc.Microsoft
Published: · Updated:
Keywords: updates, cve-2026, security, office, versions, information, published
Summary
On June 9, 2026, Microsoft published updates addressing several CVEs, including CVE-2024 and CVE-2026. CVE-2026 was previously omitted from May 2026 updates but does not require further action from users who installed those updates. The vulnerabilities primarily affect Windows 11 Version 26H1 for ARM64 and x64-based systems, with recommendations to update to the June 2026 version. Additional updates were also made for Office software to mitigate risks associated with CVE-2026. The updates are crucial for maintaining system security against potential exploitation. Microsoft has emphasized the importance of applying these updates promptly. Key Points: • CVE-2026 was inadvertently omitted from May 2026 updates but requires no further action. • Multiple CVEs related to Windows 11 and Office software were addressed in June 2026. • Users are urged to update to the latest versions to ensure protection against vulnerabilities.
Detailed Analysis
**Impact** Windows 11 Version 26H1 for ARM64-based and 64-based systems, as well as supported Office software versions, are affected by multiple vulnerabilities (CVE-2024, CVE-2025, CVE-2026). The scope includes all users running these operating systems and Office products globally. Potential impacts include unauthorized access or compromise if vulnerabilities are exploited, affecting business operations and data security. No specific sectors or geographic regions were detailed. **Technical Details** The vulnerabilities addressed include CVE-2024, CVE-2025, and CVE-2026. Updates cover Windows 11 Version 26H1 for ARM64 and 64-bit systems and supported Office software. No specific attack vectors, TTPs, malware, or IOCs were provided. The vulnerabilities appear to be addressed preemptively through patching, with no active exploitation details disclosed. **Recommended Response** Apply the June 2026 security updates for Windows 11 Version 26H1 on ARM64 and 64-bit systems and update supported Office software to the indicated versions immediately. Customers who installed May 2026 updates do not need additional action for CVE-2026. Monitor for any unusual activity related to these systems and maintain regular patch management practices.
Source articles (7)
- CVE-2026 — Api.Msrc.Microsoft · 2026-06-09
Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only.… - CVE-2026 — Api.Msrc.Microsoft · 2026-06-09
Added Office softwares to the Security Updates table. Customers that are running supported versions of Office are encouraged to update to the indicated versions to be protected from this vulnerability… - CVE-2025 — Api.Msrc.Microsoft · 2026-06-09
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft r… - CVE-2024 — Api.Msrc.Microsoft · 2026-06-09
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft r… - CVE-2024 — Api.Msrc.Microsoft · 2026-06-09
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft r… - CVE-2024 — Api.Msrc.Microsoft · 2026-06-09
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft r… - CVE-2024 — Api.Msrc.Microsoft · 2026-06-09
To comprehensively address this vulnerability Windows 11 Version 26H1 for ARM64-based Systems and Windows 11 Version 26H1 for64-based Systems have been added to the Security Updates table. Microsoft r…
Timeline
- 2026-05-01 — May 2026 Security Updates released: Microsoft released updates for various vulnerabilities but omitted CVE-2026 from the list.
- 2026-06-09 — CVE-2026 information published: Microsoft confirmed CVE-2026 was omitted from May updates but requires no further action for users.
- 2026-06-09 — CVE-2024 updates announced: Microsoft added Windows 11 Version 26H1 updates to address CVE-2024 vulnerabilities.
- 2026-06-09 — Office software updates released: Updates for Office software were added to protect against CVE-2026 vulnerabilities.
Related entities
- Windows (Platform)