Microsoft’s June 2026 Patch Tuesday Addresses 198 CVEs ( CVE-2026-49160, CVE-2026-50507)
2026-06-11T20:52:20Z•fa99ec89f38c02f202e692dc7bbf015f48854839e754f9266eb809d829db39f4
ai-cybersecurityai-executive-orderanthropic-project-glasswingdownload-inflationexposure-managementmicrosoft-patch-tuesdaynpmoracle-cspusupply-chain-attacktenable-researchvulnerability-managementzero-day
What happened
Tenable published multiple security updates and research items in late May–June 2026. Headline: Microsoft’s June 2026 Patch Tuesday is the largest ever—198 CVEs patched (32 critical, 166 important), including three zero-days and notable entries CVE-2026-49160 and CVE-2026-50507 (with two additional CVEs noted as already addressed by other CNAs: CVE-2025-10263, CVE-2026-8863). Other coverage: Oracle’s May 2026 CSPU (35 CVEs, 11 critical), a new npm supply-chain deception technique that inflates download counts to hide malicious packages, Tenable guidance on the US AI Executive Order and AI-era攻
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- tenable_blog
- Record identifier
- fa99ec89f38c02f202e692dc7bbf015f48854839e754f9266eb809d829db39f4
- Enrichment time
- 2026-06-11T20:52:20Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.