Microsoft Patch Tuesday – czerwiec 2026, wydany 9 czerwca 2026 r., obejmuje poprawki dla około 200 podatności w całym ekosystemie Microsoftu, co czyni go jednym z większych wydań w ostatnim czasie.
Wśród nich znajduje się 33 podatności krytyczne, z których większość dotyczy zdalnego wykonania kodu (RCE) – najgroźniejszego scenariusza ataku.
Szczególnie istotne są 3 podatności typu zero-day, które były publicznie znane przed wydaniem poprawek, co znacząco zwiększa ryzyko ich wykorzystania.
Problemy obejmują kluczowe komponenty, takie jak Windows, Active Directory, Hyper‑V, Remote Desktop oraz usługi HTTP, co oznacza szeroki wpływ na środowiska enterprise.
Najważniejsze podatności
1. Podniesienie uprawnień w Windows CTFMON (CVE-2026-45586)
Podatność umożliwia uzyskanie uprawnień SYSTEM poprzez błąd w obsłudze linków w Windows Collaborative Translation Framework.
Jest szczególnie groźna w scenariuszach po uzyskaniu dostępu do systemu, ponieważ pozwala atakującemu przejąć pełną kontrolę nad hostem.
2. Obejście zabezpieczeń BitLocker (CVE-2026-50507)
Luka pozwala na ominięcie mechanizmu szyfrowania BitLocker, osłabiając ochronę danych przechowywanych na dysku.
Stanowi to poważne zagrożenie w przypadku fizycznego dostępu do urządzenia, np. jego utraty lub kradzieży.
3. Denial of Service w HTTP.sys (CVE-2026-49160)
Podatność w stosie HTTP/2 systemu Windows umożliwia zakłócenie dostępności usług (DoS) poprzez specjalnie przygotowane żądania.
Ponieważ HTTP.sys jest podstawą działania IIS i innych usług sieciowych, problem dotyczy bezpośrednio serwerów dostępnych z Internetu.
4. Wiele podatności typu Remote Code Execution (RCE)
Aktualizacja usuwa 55 luk RCE, m.in. w komponentach takich jak Remote Desktop, Hyper‑V, Kerberos czy Active Directory.
Ich wykorzystanie może umożliwić zdalne wykonanie kodu, a w konsekwencji przejęcie systemów i rozprzestrzenianie się ataku w sieci.
| Tag | CVE ID | CVE opis | Krytyczność |
| .NET | CVE-2026-45491 | .NET Tampering Vulnerability | Ważna |
| .NET | CVE-2026-45490 | .NET SDK Elevation of Privilege Vulnerability | Ważna |
| Active Directory Domain Services | CVE-2026-45648 | Windows Active Directory Domain Services RCE Vulnerability | Krytyczna |
| ASP.NET Core | CVE-2026-45591 | ASP.NET Core Denial of Service Vulnerability | Ważna |
| Azure Stack Edge | CVE-2026-47643 | Azure Stack Edge RCE Vulnerability | Ważna |
| Azure Stack Edge | CVE-2026-41098 | Azure Stack Edge Spoofing Vulnerability | Ważna |
| Function Discovery Service (fdwsd.dll) | CVE-2026-42836 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability | Ważna |
| GitHub Copilot and Visual Studio Code | CVE-2026-45482 | Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability | Ważna |
| HTTP/2 | CVE-2026-49160 | HTTP.sys Denial of Service Vulnerability | Ważna |
| Linux MANA Driver | CVE-2026-45476 | Microsoft Azure Network Adapter Elevation of Privilege Vulnerability | Krytyczna |
| Microsoft Azure Attestation service and Device Health Attestation Service | CVE-2026-45642 | Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability | Ważna |
| Microsoft Azure Attestation service and Device Health Attestation Service | CVE-2026-33828 | Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability | Krytyczna |
| Microsoft Azure Kubernetes Service | CVE-2026-32193 | Azure Kubernetes Service (AKS) RCE Vulnerability | Krytyczna |
| Microsoft Bing | CVE-2026-45650 | Microsoft Bing Search Spoofing Vulnerability | Ważna |
| Microsoft Defender for Endpoint | CVE-2026-45647 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | Ważna |
| Microsoft Dynamics 365 (on-premises) | CVE-2026-40371 | Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability | Ważna |
| Microsoft Exchange Server | CVE-2026-45500 | Microsoft Exchange Server Spoofing Vulnerability | Ważna |
| Microsoft Exchange Server | CVE-2026-45501 | Microsoft Exchange Server Spoofing Vulnerability | Ważna |
| Microsoft Exchange Server | CVE-2026-47631 | Microsoft Exchange Server Spoofing Vulnerability | Ważna |
| Microsoft Exchange Server | CVE-2026-45503 | Microsoft Exchange Server Information Disclosure Vulnerability | Ważna |
| Microsoft Exchange Server | CVE-2026-45504 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Ważna |
| Microsoft Exchange Server | CVE-2026-45502 | Microsoft Exchange Server Information Disclosure Vulnerability | Ważna |
| Microsoft Exchange Server | CVE-2026-45583 | Microsoft Exchange Server RCE Vulnerability | Ważna |
| Microsoft Graphics Component | CVE-2026-42986 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Ważna |
| Microsoft Kinect | CVE-2026-41092 | Microsoft Kinect Elevation of Privilege Vulnerability | Ważna |
| Microsoft Live Share Canvas SDK | CVE-2026-45644 | Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability | Ważna |
| Microsoft Office | CVE-2026-45463 | Microsoft Office RCE Vulnerability | Krytyczna |
| Microsoft Office | CVE-2026-44821 | Microsoft Office Information Disclosure Vulnerability | Ważna |
| Microsoft Office | CVE-2026-45474 | Microsoft Office RCE Vulnerability | Krytyczna |
| Microsoft Office | CVE-2026-44819 | Microsoft Office RCE Vulnerability | Ważna |
| Microsoft Office | CVE-2026-44824 | Microsoft Office RCE Vulnerability | Ważna |
| Microsoft Office | CVE-2026-45485 | Microsoft Office Information Disclosure Vulnerability | Ważna |
| Microsoft Office | CVE-2026-45645 | Microsoft Office RCE Vulnerability | Ważna |
| Microsoft Office | CVE-2026-45472 | Microsoft Office RCE Vulnerability | Krytyczna |
| Microsoft Office | CVE-2026-45458 | Microsoft Outlook and Word RCE Vulnerability | Krytyczna |
| Microsoft Office | CVE-2026-45460 | Microsoft Office Information Disclosure Vulnerability | Krytyczna |
| Microsoft Office | CVE-2026-47635 | Microsoft Outlook and Word RCE Vulnerability | Krytyczna |
| Microsoft Office | CVE-2026-45456 | Microsoft Outlook and Word RCE Vulnerability | Krytyczna |
| Microsoft Office | CVE-2026-45461 | Microsoft Office RCE Vulnerability | Krytyczna |
| Microsoft Office | CVE-2026-45475 | Microsoft Office RCE Vulnerability | Ważna |
| Microsoft Office Click-To-Run | CVE-2026-47293 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Ważna |
| Microsoft Office Excel | CVE-2026-44820 | Microsoft Excel RCE Vulnerability | Ważna |
| Microsoft Office Excel | CVE-2026-44818 | Microsoft Excel RCE Vulnerability | Ważna |
| Microsoft Office Excel | CVE-2026-44817 | Microsoft Excel RCE Vulnerability | Ważna |
| Microsoft Office Excel | CVE-2026-45469 | Microsoft Excel RCE Vulnerability | Ważna |
| Microsoft Office Excel | CVE-2026-44822 | Microsoft Excel Information Disclosure Vulnerability | Ważna |
| Microsoft Office Excel | CVE-2026-45455 | Microsoft Excel Information Disclosure Vulnerability | Ważna |
| Microsoft Office Excel | CVE-2026-44823 | Microsoft Excel RCE Vulnerability | Ważna |
| Microsoft Office Excel | CVE-2026-45459 | Microsoft Excel Security Feature Bypass Vulnerability | Ważna |
| Microsoft Office Project | CVE-2026-45483 | Microsoft Office Project Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45484 | Microsoft SharePoint Elevation of Privilege Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45465 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-47634 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-47640 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45481 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45468 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-47638 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-47639 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-47641 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-47637 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45467 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45453 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-47636 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-48560 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-47298 | Microsoft SharePoint Server RCE Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45454 | Microsoft SharePoint RCE Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-33113 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45479 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-48562 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45464 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office SharePoint | CVE-2026-45462 | Microsoft SharePoint Server Spoofing Vulnerability | Ważna |
| Microsoft Office Word | CVE-2026-45643 | Microsoft Word RCE Vulnerability | Ważna |
| Microsoft Office Word | CVE-2026-45457 | Microsoft Word RCE Vulnerability | Ważna |
| Microsoft Office Word | CVE-2026-45486 | Microsoft Word RCE Vulnerability | Ważna |
| Microsoft Office Word | CVE-2026-45471 | Microsoft Word RCE Vulnerability | Ważna |
| Microsoft Office Word | CVE-2026-45466 | Microsoft Word Information Disclosure Vulnerability | Ważna |
| Microsoft PC Manager | CVE-2026-49161 | Microsoft PC Manager Security Feature Bypass Vulnerability | Ważna |
| Microsoft PowerToys | CVE-2026-42902 | Microsoft PowerToys Elevation of Privilege Vulnerability | Ważna |
| Microsoft Teams for Android | CVE-2026-42835 | Microsoft Teams for Android Information Disclosure Vulnerability | Ważna |
| Microsoft UxTheme Library (uxtheme.dll) | CVE-2026-45606 | Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability | Ważna |
| Microsoft Windows DNS | CVE-2026-41108 | Windows DNS Client Elevation of Privilege Vulnerability | Ważna |
| Nuance PowerScribe | CVE-2026-26142 | Nuance PowerScribe RCE Vulnerability | Krytyczna |
| Office for Android | CVE-2026-45649 | Office for Android Spoofing Vulnerability | Ważna |
| Remote Desktop Client | CVE-2026-42993 | Remote Desktop Client RCE Vulnerability | Ważna |
| Remote Desktop Client | CVE-2026-42985 | Remote Desktop Client RCE Vulnerability | Krytyczna |
| Remote Desktop Client | CVE-2026-47653 | Remote Desktop Client RCE Vulnerability | Ważna |
| Remote Desktop Client | CVE-2026-47289 | Remote Desktop Client RCE Vulnerability | Krytyczna |
| Remote Desktop Client | CVE-2026-42909 | Remote Desktop Client RCE Vulnerability | Ważna |
| Remote Desktop Client | CVE-2026-47654 | Remote Desktop Client RCE Vulnerability | Krytyczna |
| Remote Desktop Client | CVE-2026-42992 | Remote Desktop Client RCE Vulnerability | Krytyczna |
| Remote Desktop Client | CVE-2026-42913 | Remote Desktop Client RCE Vulnerability | Ważna |
| Remote Desktop Client | CVE-2026-44801 | Remote Desktop Client RCE Vulnerability | Krytyczna |
| Remote Desktop Client | CVE-2026-44799 | Remote Desktop Client RCE Vulnerability | Krytyczna |
| Remote Desktop Client | CVE-2026-48563 | Remote Desktop Client RCE Vulnerability | Krytyczna |
| Role: Windows Hyper-V | CVE-2026-45641 | Windows Hyper-V RCE Vulnerability | Krytyczna |
| Role: Windows Hyper-V | CVE-2026-42972 | Windows Hyper-V Information Disclosure Vulnerability | Ważna |
| UI Automation Manager (uiamanager.dll) | CVE-2026-45597 | Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability | Ważna |
| Universal Plug and Play (upnp.dll) | CVE-2026-45599 | Windows UPnP Device Host RCE Vulnerability | Ważna |
| Universal Plug and Play (upnp.dll) | CVE-2026-45635 | Windows UPnP Device Host RCE Vulnerability | Ważna |
| Visual Studio Code | CVE-2026-47287 | Visual Studio Code Tampering Vulnerability | Ważna |
| Visual Studio Code | CVE-2026-47292 | Visual Studio Code MSSQL Extension RCE Vulnerability | Ważna |
| Visual Studio Code | CVE-2026-40376 | Visual Studio Code Elevation of Privilege Vulnerability | Ważna |
| Visual Studio Code | CVE-2026-47284 | Visual Studio Code Information Disclosure Vulnerability | Ważna |
| Visual Studio Code | CVE-2026-47281 | Visual Studio Code Elevation of Privilege Vulnerability | Ważna |
| Visual Studio Code | CVE-2026-48569 | Visual Studio Code Security Feature Bypass Vulnerability | Ważna |
| Windows Administrator Protection | CVE-2026-42829 | Windows Administrator Protection Secure Feature Bypass Vulnerability | Ważna |
| Windows Ancillary Function Driver for WinSock | CVE-2026-42911 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Ważna |
| Windows Ancillary Function Driver for WinSock | CVE-2026-45598 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Ważna |
| Windows Ancillary Function Driver for WinSock | CVE-2026-45601 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Ważna |
| Windows Ancillary Function Driver for WinSock | CVE-2026-45603 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Ważna |
| Windows Ancillary Function Driver for WinSock | CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Ważna |
| Windows Ancillary Function Driver for WinSock | CVE-2026-45596 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Ważna |
| Windows Ancillary Function Driver for WinSock | CVE-2026-45638 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Ważna |
| Windows Application Identity (AppID) Subsystem | CVE-2026-45604 | Windows Managed Installer Information Disclosure Vulnerability | Ważna |
| Windows Application Identity (AppID) Subsystem | CVE-2026-45594 | Windows Application Identity (AppID) Information Disclosure Vulnerability | Ważna |
| Windows BitLocker | CVE-2026-45658 | Windows BitLocker Security Feature Bypass Vulnerability | Ważna |
| Windows BitLocker | CVE-2026-50507 | Windows BitLocker Security Feature Bypass Vulnerability | Ważna |
| Windows BitLocker | CVE-2026-45655 | Windows BitLocker Security Feature Bypass Vulnerability | Ważna |
| Windows Bluetooth Port Driver | CVE-2026-45640 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | Ważna |
| Windows Bluetooth Service | CVE-2026-45605 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Ważna |
| Windows Boot Manager | CVE-2026-47656 | Windows Boot Manager Security Feature Bypass Vulnerability | Ważna |
| Windows Collaborative Translation Framework | CVE-2026-45586 | Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability | Ważna |
| Windows Common Log File System Driver | CVE-2026-44809 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Ważna |
| Windows Cryptographic Services | CVE-2026-44810 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability | Krytyczna |
| Windows Deployment Services | CVE-2026-42987 | Windows Deployment Services (WDS) Remote Code Execution | Krytyczna |
| Windows DHCP Client | CVE-2026-44815 | DHCP Client Service RCE Vulnerability | Krytyczna |
| Windows DHCP Client | CVE-2026-45608 | Windows DHCP Client Information Disclosure Vulnerability | Ważna |
| Windows DHCP Server | CVE-2026-45634 | Windows DHCP Client Information Disclosure Vulnerability | Ważna |
| Windows DHCP Server | CVE-2026-45602 | Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-44807 | Windows DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-44814 | Windows DWM Core Library Information Disclosure Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-44811 | Windows DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-44808 | Windows DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-48566 | Windows DWM Core Library Information Disclosure Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-45637 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-42905 | Windows DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-44813 | Windows DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-42983 | Windows DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-44802 | Windows DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows DWM Core Library | CVE-2026-44804 | Windows DWM Core Library Elevation of Privilege Vulnerability | Ważna |
| Windows Hotpatch Monitoring Service | CVE-2026-42910 | Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability | Ważna |
| Windows HTTP.sys | CVE-2026-47291 | HTTP.sys RCE Vulnerability | Krytyczna |
| Windows Hyper-V | CVE-2026-47652 | Windows Hyper-V RCE Vulnerability | Krytyczna |
| Windows Hyper-V | CVE-2026-45607 | Windows Hyper-V RCE Vulnerability | Krytyczna |
| Windows Internet (wininet.dll) | CVE-2026-45592 | Windows Internet (wininet.dll) Elevation of Privilege Vulnerability | Ważna |
| Windows Kerberos | CVE-2026-47288 | Windows Kerberos Key Distribution Center (KDC) Remote Code Execution | Krytyczna |
| Windows Kerberos | CVE-2026-42914 | Windows Kerberos Denial of Service Vulnerability | Ważna |
| Windows Kerberos | CVE-2026-42903 | Windows Kerberos Denial of Service Vulnerability | Ważna |
| Windows Kernel | CVE-2026-42984 | Windows Kernel Elevation of Privilege Vulnerability | Ważna |
| Windows Kernel | CVE-2026-45653 | Windows Kernel Elevation of Privilege Vulnerability | Ważna |
| Windows Kernel | CVE-2026-48583 | Windows Kernel Elevation of Privilege Vulnerability | Ważna |
| Windows Kernel | CVE-2025-10263 | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | Krytyczna |
| Windows Kernel | CVE-2026-45657 | Windows Kernel RCE Vulnerability | Krytyczna |
| Windows Kernel-Mode Drivers | CVE-2026-45600 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Ważna |
| Windows Mark of the Web (MOTW) | CVE-2026-45595 | Windows Mark of the Web Security Feature Bypass Vulnerability | Ważna |
| Windows Media | CVE-2026-48574 | Windows Media RCE Vulnerability | Krytyczna |
| Windows Narrator Braille | CVE-2026-48565 | Windows Narrator Braille Elevation of Privilege Vulnerability | Ważna |
| Windows Network Controller (NC) Host Agent | CVE-2026-44805 | Windows Network Controller (NC) Host Agent Denial of Service Vulnerability | Ważna |
| Windows NT OS Kernel | CVE-2026-42980 | NT OS Kernel Elevation of Privilege Vulnerability | Ważna |
| Windows NT OS Kernel | CVE-2026-42916 | NT OS Kernel Elevation of Privilege Vulnerability | Ważna |
| Windows NTFS | CVE-2026-45636 | Windows NTFS RCE Vulnerability | Ważna |
| Windows NTLM | CVE-2026-50508 | Windows NTLM Spoofing Vulnerability | Ważna |
| Windows Performance Monitor | CVE-2026-42981 | Windows Performance Monitor RCE Vulnerability | Ważna |
| Windows Performance Monitor | CVE-2026-42974 | Windows Performance Monitor RCE Vulnerability | Ważna |
| Windows Program Compatibility Assistant Service | CVE-2026-45487 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | Ważna |
| Windows Projected File System Filter Driver | CVE-2026-42828 | Windows Projected File System Elevation of Privilege Vulnerability | Ważna |
| Windows Projected File System Filter Driver | CVE-2026-42837 | Windows Projected File System Elevation of Privilege Vulnerability | Ważna |
| Windows Push Notifications | CVE-2026-42991 | Windows Push Notifications Elevation of Privilege Vulnerability | Ważna |
| Windows Push Notifications | CVE-2026-42977 | Windows Push Notifications Elevation of Privilege Vulnerability | Ważna |
| Windows Push Notifications | CVE-2026-42979 | Windows Push Notifications Elevation of Privilege Vulnerability | Ważna |
| Windows Push Notifications | CVE-2026-42978 | Windows Push Notifications Elevation of Privilege Vulnerability | Ważna |
| Windows Push Notifications | CVE-2026-42973 | Windows Push Notification Information Disclosure Vulnerability | Ważna |
| Windows Push Notifications | CVE-2026-42970 | Windows Push Notification Information Disclosure Vulnerability | Ważna |
| Windows Push Notifications | CVE-2026-42969 | Windows Push Notification Information Disclosure Vulnerability | Ważna |
| Windows Push Notifications | CVE-2026-42971 | Windows Push Notification Information Disclosure Vulnerability | Ważna |
| Windows RDP | CVE-2026-45639 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Ważna |
| Windows RDP | CVE-2026-42908 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Ważna |
| Windows SDK | CVE-2026-45593 | Windows SDK Elevation of Privilege Vulnerability | Ważna |
| Windows Secure Boot | CVE-2026-45588 | Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Secure Boot | CVE-2026-45654 | Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Secure Boot | CVE-2026-48570 | Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Secure Boot | CVE-2026-48568 | Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Secure Boot | CVE-2026-48575 | Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Secure Boot | CVE-2026-48578 | Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Secure Boot | CVE-2026-48573 | Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Secure Boot | CVE-2026-48576 | Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Shell | CVE-2026-42907 | Windows Shell Information Disclosure Vulnerability | Ważna |
| Windows Shell | CVE-2026-42906 | Windows Shell Information Disclosure Vulnerability | Ważna |
| Windows Storage | CVE-2026-47648 | Windows Storage Elevation of Privilege Vulnerability | Ważna |
| Windows TCP/IP | CVE-2026-42904 | Windows TCP/IP Elevation of Privilege Vulnerability | Ważna |
| Windows TCP/IP | CVE-2026-42915 | Windows TCP/IP Denial of Service Vulnerability | Ważna |
| Windows Telephony Service | CVE-2026-42968 | Windows Telephony Server Information Disclosure Vulnerability | Ważna |
| Windows Telephony Service | CVE-2026-42912 | Windows Telephony Service Elevation of Privilege Vulnerability | Ważna |
| Windows UEFI | CVE-2026-8863 | UEFI Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows UEFI | CVE-2026-45656 | UEFI Secure Boot Security Feature Bypass Vulnerability | Ważna |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-40404 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Ważna |
| Windows Universal Disk Format File System Driver (UDFS) | CVE-2026-40409 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Ważna |
| Windows Win32K – GRFX | CVE-2026-44812 | Windows Graphics Component RCE Vulnerability | Krytyczna |
| Windows Win32K – GRFX | CVE-2026-44803 | Windows Graphics Component RCE Vulnerability | Krytyczna |
| Winlogon | CVE-2026-42989 | Winlogon Elevation of Privilege Vulnerability | Ważna |