Microsoft rolls out June 2026 Windows and Exchange security updates

Microsoft released its June 2026 Patch Tuesday updates for Windows and Exchange Server. The Windows update adds unlimited pause capability for Insider beta‑channel builds, moves Microsoft Defender for Endpoint EDR updates to a separate channel, introduces a low‑latency profile for faster UI response and new Task‑Manager columns that display real‑time usage of Neural Processing Units (NPUs). Additional changes include Bluetooth LE shared‑audio support, multi‑app camera improvements, USB4 stability fixes and a Secure‑Boot certificate update required after June 2026.

The Exchange Server update addresses several vulnerabilities, most notably delivering a full fix for the OWA cross‑site scripting/spoofing flaw CVE‑2026‑42897 that was previously only mitigated. It also patches other CVEs reported by Microsoft and security partners. Organizations running Exchange Server 2016 or 2019 must be enrolled in the Period 2 Extended Security Update (ESU) program to receive the patch, and the update is required for continued use of the Emergency Mitigation and Flighting services after July 2026.