CyberzSOC

Publication detail
← Back to advisories & guidance

Microsoft Releases June 2026 Security Updates ↗ source

June 10, 2026 JPCERT/CC Alert
Source: https://www.jpcert.or.jp/english/at/2026/at260017.html

Summary

Attackers leveraging these vulnerabilities may be able to execute arbitrary code remotely without authentication, etc. Microsoft has announced that the following vulnerability, disclosed on May 14, has been exploited in the wild. Please refer to the latest information provided by Microsoft and implement the measures described in "II. Solution." Microsoft Exchange Server Spoofing Vulnerability Please apply the security update programs through Microsoft Update, Windows Update, etc. If you have any information regarding this alert, please contact JPCERT/CC.

News Coverage

DateSourceArticle
2026-08-03 Check Point Research 3rd August – Threat Intelligence Report CVE-2026-42897

Articles from the monitored vendor research blogs and security news feeds that reference a CVE cited in this publication, or name the campaign it covers. Coverage begins when feed monitoring started; earlier articles are not indexed.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2026-42897 8.1 High Microsoft Microsoft Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction…

Extracted from the publication text. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Microsoft 388 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.