Microsoft Security Updates – 06 July 2026

The addressed vulnerabilities could allow the attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, bypass security restrictions, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability (CVE- 2026-57100):

• CVSS: 9.9
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

2. Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2026-58289):

• CVSS: 9.0
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: None
• User Interaction: None
• Consequences: Remote Code Execution