Microsoft released updates for nearly 200 flaws in its latest monthly update rollout on Patch Tuesday, surpassing the previous record of nearly 170 CVEs in October 2025.
Among many others, the latest update from Redmond fixes a total of 32 critical CVEs and three zero-days.
Dustin Childs, head of threat awareness at TrendAI's Zero Day Initiative, said:
“We are heading into a high-stakes summer for cybersecurity. June’s record is a warning that AI is powering flaw discovery at an uncontrollable scale. The current number of CVEs sent by Microsoft this year exceeds the total number of CVEs sent in all of 2018. It’s remarkable that Microsoft can produce so many updates in a single month, and I expect many testers will be wondering what quality issues there might be.”
And with the addition of hundreds of CVEs in Google Chrome and Microsoft Edge and other third-party patches, bringing the total to nearly 600, Chris Goettl, vice president of security product management at Ivanti, said:
"We are in the era of the Patch Apocalypse."
“There will be more CVEs being resolved by vendors at a much faster rate than we have ever seen before. Unfortunately, this will also include more zero-day and n-day exploits than we have had in the past.”
Goettl said many vendors have recognized the need to use AI tools in security research to identify and fix flaws, with Oracle, Google Chrome and Mozilla increasing their update rates. It remains to be seen whether Microsoft will follow suit.
A note on this month's Patch Tuesday
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
