Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities

Summary: Microsoft's June 2026 security update covers 206 vulnerabilities, 32 of them rated critical, with 28 critical entries being remote code execution flaws across products including Windows Active Directory, Kerberos KDC, Remote Desktop client, Hyper-V, Office, Outlook, Word, SQL Server and the HTTP Protocol Stack. Talos flags four critical flaws as more likely to be exploited: CVE-2026-42985 (heap-based buffer overflow in Remote Desktop Client), CVE-2026-47291 (integer overflow in http.sys), and CVE-2026-44803 and CVE-2026-44812 (integer overflow in the Windows Win32K GRFX graphics component).
Bottom line: CVE-2026-47291 in http.sys can be triggered by an unauthenticated attacker sending a single specially crafted packet to a targeted server, and CVE-2026-42985 lets an attacker who controls a Remote Desktop Server run code on the machine of any victim who connects to it with the vulnerable client.

Read the original at Cisco Talos ↗