GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8
Security advisory · GitLab patch releases
Weekly briefing
Week 24 · 8 Jun – 14 Jun 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
183 source records · 108 groupsSecurityOracle Database / Oracle E-Business Suite / Oracle Java / Oracle WebLogic Server
Oracle Security Alert CVE-2026-35273
Security advisory · Oracle security alert directory
SecurityUbiquiti UniFi
Security Advisory Bulletin 065
Security news · Ubiquiti security advisory bulletins
SecurityCisco
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2026-20245
Assessment context
CISA lists it as exploited
SecurityGoogle Chrome
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Google · exploited, added to CISA KEV
CVE-2026-11645
Assessment context
CISA lists it as exploited
SecurityMicrosoft Edge
Edge 149.0.4022.62: fixes CVE-2026-11645, exploited in the wild
Security advisory · Microsoft Edge security release notes
Assessment context
The vendor reports an exploit in the wild
Message CenterTeams
MC1294522: Microsoft Teams: Enhanced cross-platform join via Session Initiation Protocol (SIP) for Teams Rooms on Android
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Teams
Assessment context
Microsoft marks it a major change
Message CenterWindows2 source records
Message Center · Prevent or fix issues · 2 entries
- MC1318295: Take action: Mitigation guidance updated with a new script for CVE-2026-45585
Message Center · Prevent or fix issues · Microsoft 365 Message Center Archive by Merill Fernando
Windows
Assessment context
Microsoft asks admins to prevent or fix an issue · Microsoft marks it a major change
- MC1385471: The June 2026 Windows security update is now available
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Windows
Assessment context
Microsoft marks it a major change
ReleasesWindows / Windows Server2 source records
Security release · 2 entries
- KB5094122 · Windows 10, version 1607 +1
Security release
Windows 10, version 1607, Windows Server 2016
Assessment context
Monthly security release
- KB5094123 · Windows 10, version 1809 +1
Security release
Windows 10, version 1809, Windows Server 2019
Assessment context
Monthly security release
ReleasesWindows Server2 source records
Security release · 2 entries
- KB5094125 · Windows Server 2025
Security release
Windows Server 2025
Assessment context
Monthly security release
- KB5094128 · Windows Server 2022
Security release
Windows Server 2022
Assessment context
Monthly security release
ReleasesWindows4 source records
Security release · 4 entries
- KB5093998 · Windows 11, version 23H2
Security release
Windows 11, version 23H2
Assessment context
Monthly security release
- KB5094126 · Windows 11, version 24H2 +1
Security release
Windows 11, version 24H2, Windows 11, version 25H2
Assessment context
Monthly security release
- KB5094127 · Windows 10, version 21H2 +1
Security release
Windows 10, version 21H2, Windows 10, version 22H2
Assessment context
Monthly security release
Show the other 1 entries
- KB5095051 · Windows 11, version 26H1
Security release
Windows 11, version 26H1
Assessment context
Monthly security release
SecurityCloudflare
WAF - WAF Release - 2026-06-09
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2026-9082, CVE-2026-45247, CVE-2026-40175
CVE-2026-9082CVE-2026-45247CVE-2026-40175
SecurityFortinet3 source records
Security advisory · 3 entries
- FortiSandbox: Second-Order OS Command Injection via JSON Input on start vnc feature
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it critical
- FortiOS: Restricted CLI escape using Lua
Security advisory · Fortinet PSIRT advisories
- FortiPortal: Improper access control in API endpoints
Security advisory · Fortinet PSIRT advisories
SecurityMicrosoft Security Update Guide
June 2026 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
Updates and guidanceAzure
Updates and guidanceGitHub Copilot / SQL Server
Updates and guidanceOpenAI
Web search can now return image results alongside regular text results.
Product news · OpenAI API changelog
Updates and guidancePurview
Extend Microsoft Purview data protection to AWS Bedrock agents for cross-cloud AI governance
Product news · Microsoft Purview Blog
Message CenterDefender
MC1358832: Microsoft Secure Score: New recommendation to reduce inbound internet exposure
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Message CenterDynamics 365
Message CenterExchange / Microsoft 365 Apps
MC1385580: Grouped notifications in Outlook
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Exchange Online, Microsoft 365 apps
Message CenterMicrosoft 365 Apps / Purview
MC1234661: DLP policies will be able to block Copilot processing of sensitivity‑labeled files in all storage locations
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 suite, Microsoft 365 apps, Microsoft Purview
Message CenterMicrosoft 365 Message Center Archive by Merill Fernando
MC1385586: Microsoft 365: Organizational Data – Granular access policy controls for custom attributes
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft 365 suite
Message CenterOneDrive
MC1385585: OneDrive: New Shortcuts folder option when adding shortcuts
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft OneDrive
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.