BLUF: Microsoft has released its June 2026 Patch Tuesday update addressing 206 vulnerabilities, including 6 zero-days — at least 3 of which are confirmed actively exploited in the wild. All Windows environments are affected. Apply updates immediately.
DETAILS
- Scale: Microsoft patched 206 total vulnerabilities in the June 2026 Patch Tuesday release, one of the larger monthly update cycles on record.
- Zero-days: 6 zero-days addressed in total; corroborating sources (CrowdStrike, Qualys) confirm at least 3 were publicly disclosed prior to patching. Active exploitation status of all 6 has not been uniformly confirmed across sources — treat all 6 as high-priority pending clarification.
- Named vulnerabilities: Three zero-days have been assigned public identifiers: YellowKey, GreenPlasma, and MiniPlasma — Microsoft has patched all three. Specific CVE numbers, affected components, and exploitation details for these are not confirmed in available source material at this time.
- Scope of affected products: Specific product families affected beyond the Windows ecosystem are not fully confirmed from available source data. Adobe also released security updates in conjunction with this Patch Tuesday cycle (per Qualys).
- ⚠️ UNCERTAINTY FLAG: Discrepancy exists between sources — one BleepingComputer reference cites 3 zero-days, another cites 6. The 6-zero-day figure appears to be the most current reporting. Treat the lower figure as potentially outdated.
IMPACT
- Who is affected: All organizations and individuals running unpatched Microsoft Windows and associated products. Enterprise environments are at elevated risk given the confirmed public disclosure of multiple zero-days prior to patch release.
- Scope: Global. 206 vulnerabilities across Microsoft’s product stack represents broad attack surface exposure.
- Threat actor interest: Publicly disclosed zero-days attract rapid weaponization. The window between patch release and exploit deployment is historically short — often hours to days.
RECOMMENDED ACTIONS
- Patch immediately — Deploy June 2026 Patch Tuesday updates across all Windows endpoints and servers. Prioritize YellowKey, GreenPlasma, and MiniPlasma patches.
- Audit exposure — Identify any internet-facing or high-value systems running affected Microsoft products; prioritize those for emergency patching.
- Monitor for exploitation — Increase logging and alerting on Windows systems for anomalous behavior consistent with zero-day exploitation while patching is in progress.
- Check Adobe updates — Adobe also released patches this cycle; review and apply as applicable.
- Verify patch deployment — Confirm update rollout via endpoint management tooling; do not assume automatic updates have completed.
SOURCES
- BleepingComputer — Microsoft June 2026 Patch Tuesday coverage
- CrowdStrike — June 2026 Patch Tuesday analysis (206 vulnerabilities, 3 publicly disclosed zero-days confirmed)
- Qualys Threat Research — Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review
- BleepingComputer — Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days