Microsoft’s June 2026 Patch Tuesday Addresses 198 CVEs ( CVE-2026-49160, CVE-2026-50507)
2026-06-09T20:52:29Z•3e274ef1cbd63118ed5a24cbc34ec516538ef3a2fba09258f07b966704cf0f60
ai-executive-orderanthropiccritical-patchescspucvedownload-pumpingexposure-managementmicrosoftnpmoraclepatch-tuesdayproject-glasswingsupply-chaintenable-researchzero-day
What happened
Tenable blog roundup (June 2026): Microsoft’s June 2026 Patch Tuesday is the largest on record—198 CVEs patched (32 critical, 166 important), including three zero-days (notably CVE-2026-49160 and CVE-2026-50507); two CVEs (CVE-2025-10263, CVE-2026-8863) were noted as already disclosed by other CNAs. Additional posts cover Oracle’s May 2026 CSPU (35 CVEs, 11 critical), research on a new npm “download pumping” supply-chain deception technique, Tenable joining Anthropic’s Project Glasswing, guidance on the June 2026 AI Executive Order for federal agencies, and graph-based research mapping threat-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- tenable_blog
- Record identifier
- 3e274ef1cbd63118ed5a24cbc34ec516538ef3a2fba09258f07b966704cf0f60
- Enrichment time
- 2026-06-09T20:52:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.