{"id":35432,"date":"2020-06-09T21:28:45","date_gmt":"2020-06-09T21:28:45","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/"},"modified":"2020-06-09T21:28:45","modified_gmt":"2020-06-09T21:28:45","slug":"junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/","title":{"rendered":"June&#8217;s Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2019\/08\/13\/beach_shutterstock.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p><strong class=\"trailer\">Patch Tuesday<\/strong> Microsoft has given IT admins and folks another busy Patch Tuesday with 129 security vulnerabilities to address.<\/p>\n<p>The Redmond giant has posted fixes for CVE-listed bugs in its latest monthly security update, including 23 that allow for remote code execution. The massive bundle is not entirely unexpected, as security experts <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2020\/05\/29\/bug_reports_down\/\" rel=\"noopener noreferrer\">have suggested<\/a> that vendors are still catching up on their patching and reporting routines.<\/p>\n<p>Of the 129 patches this month, 11 were rated by Microsoft as critical security risks. Fortunately, there are no reports of public exploit code nor in-the-wild attacks on any of the flaws as yet \u2013 but remember Exploit Wednesday. Once the bugs are known, and patches available, exploits can be reverse-engineered.<\/p>\n<h3 class=\"crosshead\"><span>LNK flaws strike again<\/span><\/h3>\n<p>One of the bugs that was of particular interest to researchers was <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1299\">CVE-2020-1299<\/a>, a remote code execution issue that arises when trying to load Windows shortcut (LNK) files. This is the third time this year Microsoft has had to address an RCE bug in such shortcuts.<\/p>\n<p>&#8220;An attacker could use this vulnerability to get code execution by having an affected system process a specially crafted .LNK file,&#8221; <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.zerodayinitiative.com\/blog\/2020\/6\/9\/the-june-2020-security-update-review\">explained<\/a> Dustin Childs of the Trend Micro Zero Day Initiative (ZDI).<\/p>\n<p>&#8220;These types of files are often put on a USB drive in an attempt to bridge an air-gapped network.&#8221;<\/p>\n<p>Also catching the eye of the ZDI team was <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1229\">CVE-2020-1229<\/a>, a security bypass bug in Outlook that, while not particularly concerning at first glance, poses a significant risk if chained with other exploits.<\/p>\n<p>&#8220;This bug could allow attackers to automatically load remote images \u2013 even from within the Preview Pane,&#8221; said Childs. &#8220;While this bypass alone could just disclose the IP address of a target system, it\u2019s not unheard of to get code execution through the processing of specially crafted images (see any GDI+ bug).&#8221;<\/p>\n<p>Other RCE bugs include <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1300\">CVE-2020-1300<\/a>, which is exploited via a malformed CAB file, and <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1286\">CVE-2020-1286<\/a>, a Windows Shell bug that can be exploited with malformed web pages or emails.<\/p>\n<p>SharePoint Server admins will want to make sure they test out and install the fix for <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1181\">CVE-2020-1181<\/a> as soon as possible in order to prevent remote code execution attacks. Microsoft also patched six SharePoint XSS flaws (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1177\">CVE-2020-1177<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1183\">CVE-2020-1183<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1297\">CVE-2020-1297<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1298\">CVE-2020-1298<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1318\">CVE-2020-1318<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1320\">CVE-2020-1320<\/a>), two elevation of privilege flaws (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1295\">CVE-2020-1295<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1178\">CVE-2020-1178<\/a>), and three spoofing bugs (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1148\">CVE-2020-1148<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1289\">CVE-2020-1289<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1323\">CVE-2020-1323<\/a>).<\/p>\n<p>As usual, VBScript (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1213\">CVE-2020-1213<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1216\">CVE-2020-1216<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1260\">CVE-2020-1260<\/a>) and the ChakraCore Scripting Engine (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1073\">CVE-2020-1073<\/a>) were also among the recipients of critical remote code execution fixes.<\/p>\n<p>While Microsoft tends not to consider Office and multimedia RCE bugs to be critical risks because users need to manually open files in order to trigger an attack, admins should put a priority on testing and patching the updates for Jet Database (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1208\">CVE-2020-1208<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1236\">CVE-2020-1236<\/a>), Media Foundation (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1238\">CVE-2020-1238<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1239\">CVE-2020-1239<\/a>), Excel (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1225\">CVE-2020-1225<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1226\">CVE-2020-1226<\/a>), Office (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1321\">CVE-2020-1321<\/a>), VBScript (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1214\">CVE-2020-1214<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1215\">CVE-2020-1215<\/a>, <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1230\">CVE-2020-1230<\/a>), and SMB (<a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1301\">CVE-2020-1301<\/a>).<\/p>\n<p>Those running word on Android will also want to make sure they update their software, as Microsoft issued a patch for <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-1223\">CVE-2020-1223<\/a>, a remote code execution flaw.<\/p>\n<h3 class=\"crosshead\"><span>Haven&#8217;t killed Flash yet? In that case you&#8217;ll want this Adobe patch<\/span><\/h3>\n<p>Adobe has <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/helpx.adobe.com\/security\/products\/flash-player\/apsb20-30.html\">issued a fix<\/a> for a single remote code execution hole in its aging Flash Player plugin. CVE-2020-9633 is a use-after-free bug present in the Windows, macOS, Linux, and ChromeOS versions of Flash Player. Adobe did not say who found the flaw.<\/p>\n<p>Also updated was the Adobe Experience Manager, an ad management tool. <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/helpx.adobe.com\/security\/products\/experience-manager\/apsb20-31.html\">The fix<\/a> addresses six CVE-listed vulnerabilities (CVE-2020-9643, CVE-2020-9647, CVE-2020-9648, CVE-2020-9644, CVE-2020-9645, CVE-2020-9651) allowing for information disclosure and arbitrary JavaScript execution. Netcentric&#8217;s Thomas Hartmann found CVE-2020-9644, while indie researcher Dmitry Muntyanov got credit for CVE-2020-9645.<\/p>\n<p>The third of the updates was given to <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/helpx.adobe.com\/security\/products\/framemaker\/apsb20-32.html\">Adobe Framemaker<\/a> to clean up up three arbitrary code execution bugs (CVE-2020-9636, CVE-2020-9634, CVE-2020-9635). Adobe credits ZDI researcher Francis Provencher with reporting CVE-2020-9634 and CVE-2020-9635, while Honggang Ren of Fortiguard Labs found CVE-2020-9636.<\/p>\n<h3 class=\"crosshead\"><span>Five Intel updates, including a re-hash of CacheOut bug<\/span><\/h3>\n<p>Chipzilla is now part of the Patch Tuesday as well, so everyone using Intel hardware will want to check out the fixes for flaws in <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00366.html\">Innovation Engine<\/a> (CVE-2020-8675, elevation of privilege via the firmware build and signing tool) and <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00320.html\">Special Register Buffer<\/a> (CVE-2020-0543, information disclosure caused by incomplete register data cleanup). This speculative execution vulnerability, dubbed <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/sgaxe.com\/files\/SGAxe.pdf\">SGAxe<\/a> [PDF], is a new take on the <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2020\/01\/28\/intel_processor_data_leak\/\" rel=\"noopener noreferrer\">CacheOut vulnerability<\/a>.<\/p>\n<p>A <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00295.html\">single bulletin<\/a> was issued to address 20 different vulnerabilities in CSME, SPS, TXE, AMT, ISM, and DAL. The bugs have a number of sources, including the IPv6 subsystem, improper input validation, and a one-way hash in CSME.<\/p>\n<p>Exploits could allow for denial of service, information disclosure, and elevation of privilege, the latter being particularly bad in the context of Intel firmware.<\/p>\n<p>Intel also issued updates, for its <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00322.html\">BIOS<\/a> (CVE-2020-0528, denial of service or elevation of privilege via improper buffer restrictions) and <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00266.html\">SSD firmware<\/a> (CVE-2020-0527, information disclosure from insufficient control flow management).<\/p>\n<h3 class=\"crosshead\"><span>SAP pushes 17 updates<\/span><\/h3>\n<p>Those admins looking over SAP installations will want to check if their software is included in <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/wiki.scn.sap.com\/wiki\/pages\/viewpage.action?pageId=547426775\">the lineup<\/a> of 17 June security notes, including fixes to <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/launchpad.support.sap.com\/#\/notes\/2928570\">Apache Tomcat<\/a> (CVE-2020-1938), <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/launchpad.support.sap.com\/#\/notes\/2918924\">two<\/a> <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/launchpad.support.sap.com\/#\/notes\/2906366\">fixes<\/a> for SAP Commerce (CVE-2020-6265, CVE-2020-6264), SAP <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/launchpad.support.sap.com\/#\/notes\/2933282\">Success Factors<\/a> (CVE-2020-6279), and <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/launchpad.support.sap.com\/#\/notes\/2912939\">NetWeaver<\/a> (CVE-2020-6275). \u00ae<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.com\/tl\/1942\/-8722\/ransomware-has-gone-nuclear?td=wptl1942\">Webcast: Ransomware has gone nuclear<\/a><\/p>\n<p>READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2020\/06\/09\/june_2020_patch_tuesday\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft, Intel, Adobe, SAP emit fixes in security synchronicity Patch Tuesday\u00a0 Microsoft has given IT admins and folks another busy Patch Tuesday with 129 security vulnerabilities to address.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":35433,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-35432","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>June&#039;s Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"June&#039;s Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-06-09T21:28:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"648\" \/>\n\t<meta property=\"og:image:height\" content=\"431\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"June&#8217;s Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day\",\"datePublished\":\"2020-06-09T21:28:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/\"},\"wordCount\":932,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/\",\"name\":\"June's Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg\",\"datePublished\":\"2020-06-09T21:28:45+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg\",\"width\":648,\"height\":431},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"June&#8217;s Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"June's Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/","og_locale":"en_US","og_type":"article","og_title":"June's Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-06-09T21:28:45+00:00","og_image":[{"width":648,"height":431,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"June&#8217;s Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day","datePublished":"2020-06-09T21:28:45+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/"},"wordCount":932,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/","url":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/","name":"June's Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg","datePublished":"2020-06-09T21:28:45+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day.jpg","width":648,"height":431},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/junes-patch-tuesday-reveals-23-ways-to-remotely-pwn-windows-and-over-100-more-bugs-that-could-ruin-your-day\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"June&#8217;s Patch Tuesday reveals 23 ways to remotely pwn Windows \u2013 and over 100 more bugs that could ruin your day"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/35432","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=35432"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/35432\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/35433"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=35432"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=35432"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=35432"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}