Microsoft Security Updates – 07 June 2026

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Azure HorizonDB Elevation of Privilege Vulnerability (CVE-2026-48567):

• CVSS: 10
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Privileges

2. Microsoft Exchange Online Information Disclosure Vulnerability (CVE-2026-48579):

• CVSS: 9.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Obtain Information

The affected products:

• Azure HorizonDB.
• Microsoft Graph.
• Microsoft Exchange Online.
• Copilot Chat (Microsoft Edge).
• Microsoft 365 Copilot.
• Microsoft SharePoint Server.