漏洞概要
2026年6月10日（北京时间），微软发布了2026年6月安全更新，共发布了204个CVE的补丁程序，比上月增多了66个。
在漏洞安全等级方面，存在39个标记等级为“Critical”的漏洞，165个漏洞被标记为“Important/High”等级的漏洞； 在漏洞类型方面，主要有56个远程代码执行漏洞，64个权限提升漏洞以及30个信息泄露漏洞。
重要漏洞分析
DHCP客户端服务远程代码执行漏洞 CVE-2026-44815
Windows DHCP 客户端是 Windows 系统负责自动获取 IP、网关等网络配置的核心组件，系统默认启用。
其中存在远程代码执行漏洞，攻击者可发送恶意网络数据包远程触发漏洞，成功利用后可获取系统权限并执行任意代码。经过评估，该漏洞危害较大，建议用户及时更新微软安全补丁。
HTTP.sys远程代码执行漏洞 CVE-2026-47291
Windows HTTP.sys 是微软 Windows 操作系统中的内核级驱动组件，负责处理 HTTP 协议请求，广泛应用于 IIS Web 服务器与各类基于 HTTP 通信的 Windows 服务，是系统网络通信的核心组件。
其中存在整数溢出漏洞，攻击者可以利用该漏洞在目标系统上以 SYSTEM 权限远程执行任意代码。该漏洞无需用户交互与身份认证，通过网络即可直接触发。经过评估，该漏洞危害较大，建议用户及时更新微软安全补丁。
影响范围
漏洞名称、CVE编号 | 受影响版本 |
DHCP客户端服务远程代码执行漏洞
CVE-2026-44815 | Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows 11 Version 25H2 for ARM64-based Systems
Windows Server 2016 (Server Core installation)
Windows Server 2016
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 11 Version 26H1 for ARM64-based Systems
Windows 11 version 26H1 for x64-based Systems
Windows Server 2025
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems
Windows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 (Server Core installation)
Windows Server 2012
Windows Server 2025 (Server Core installation)
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows Server 2022 (Server Core installation)
Windows Server 2022
Windows Server 2019 (Server Core installation)
Windows Server 2019
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems |
HTTP.sys远程代码执行漏洞
CVE-2026-47291 | Windows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 (Server Core installation)
Windows Server 2012
Windows Server 2016 (Server Core installation)
Windows Server 2016
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 11 Version 26H1 for ARM64-based Systems
Windows 11 version 26H1 for x64-based Systems
Windows Server 2025
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows 11 Version 25H2 for ARM64-based Systems
Windows Server 2025 (Server Core installation)
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows Server 2022 (Server Core installation)
Windows Server 2022
Windows Server 2019 (Server Core installation)
Windows Server 2019
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems |
官方修复建议
微软官方已更新受影响软件的安全补丁，用户可根据不同系统版本下载安装对应的安全补丁。
