{"id":1601,"date":"2026-06-10T21:21:45","date_gmt":"2026-06-10T14:21:45","guid":{"rendered":"https:\/\/vncybers.vn\/microsoft-lap-ky-luc-buon-voi-206-lo-hong-bao-mat-trong-patch-tuesday-thang-6-2026\/"},"modified":"2026-06-12T12:19:41","modified_gmt":"2026-06-12T05:19:41","slug":"microsoft-lap-ky-luc-buon-voi-206-lo-hong-bao-mat-trong-patch-tuesday-thang-6-2026","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/microsoft-lap-ky-luc-buon-voi-206-lo-hong-bao-mat-trong-patch-tuesday-thang-6-2026\/","title":{"rendered":"Microsoft l\u1eadp k\u1ef7 l\u1ee5c bu\u1ed3n v\u1edbi 206 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt trong Patch Tuesday th\u00e1ng 6\/2026"},"content":{"rendered":"

R\u1ea1ng s\u00e1ng ng\u00e0y 10\/06\/2026 (theo gi\u1edd Vi\u1ec7t Nam), Microsoft \u0111\u00e3 tung ra b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt \u0111\u1ecbnh k\u1ef3 Patch Tuesday th\u00e1ng 6, ch\u00ednh th\u1ee9c x\u00e1c l\u1eadp k\u1ef7 l\u1ee5c m\u1edbi v\u1ec1 s\u1ed1 l\u01b0\u1ee3ng l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c v\u00e1 trong m\u1ed9t th\u00e1ng v\u1edbi t\u1ed5ng c\u1ed9ng 206 l\u1ed7i b\u1ea3o m\u1eadt.<\/p>\n

\"Microsoft<\/p>\n

S\u1ef1 b\u00f9ng n\u1ed5 n\u00e0y kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf con s\u1ed1 206 m\u00e0 c\u00f2n \u1edf m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng khi c\u00f3 t\u1edbi 39 l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c x\u1ebfp h\u1ea1ng Nghi\u00eam tr\u1ecdng<\/strong> (Critical) v\u00e0 167 l\u1ed7i Quan tr\u1ecdng<\/strong> (Important). \u0110\u1eb7c bi\u1ec7t, b\u1ea3n c\u1eadp nh\u1eadt l\u1ea7n n\u00e0y gi\u1ea3i quy\u1ebft tr\u1ef1c ti\u1ebfp 3 l\u1ed7 h\u1ed5ng Zero-day \u0111\u00e3 b\u1ecb c\u00f4ng b\u1ed1 c\u00f4ng khai tr\u01b0\u1edbc \u0111\u00f3, g\u00e2y \u00e1p l\u1ef1c c\u1ef1c l\u1edbn l\u00ean \u0111\u1ed9i ng\u0169 qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng tr\u00ean to\u00e0n c\u1ea7u.<\/p>\n

K\u1ef7 l\u1ee5c b\u1ecb x\u00f4 \u0111\u1ed5 b\u1edfi “c\u01a1n b\u00e3o” AI<\/h3>\n

Theo c\u00e1c chuy\u00ean gia t\u1eeb Zero Day Initiative (ZDI), vi\u1ec7c s\u1ed1 l\u01b0\u1ee3ng l\u1ed7 h\u1ed5ng t\u0103ng v\u1ecdt – v\u01b0\u1ee3t xa t\u1ed5ng s\u1ed1 l\u1ed7i c\u1ee7a c\u1ea3 n\u0103m 2018 c\u1ed9ng l\u1ea1i – ph\u1ea7n l\u1edbn l\u00e0 do s\u1ef1 tham gia c\u1ee7a tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o (AI) trong qu\u00e1 tr\u00ecnh r\u00e0 qu\u00e9t v\u00e0 t\u00ecm ki\u1ebfm l\u1ed7i (AI-assisted vulnerability discovery). C\u00e1c c\u00f4ng c\u1ee5 AI hi\u1ec7n nay c\u00f3 kh\u1ea3 n\u0103ng ph\u00e1t hi\u1ec7n nh\u1eefng sai s\u00f3t trong m\u00e3 ngu\u1ed3n \u1edf quy m\u00f4 v\u00e0 t\u1ed1c \u0111\u1ed9 m\u00e0 con ng\u01b0\u1eddi kh\u00f4ng th\u1ec3 theo k\u1ecbp.<\/p>\n

Satnam Narang, k\u1ef9 s\u01b0 nghi\u00ean c\u1ee9u cao c\u1ea5p t\u1ea1i Tenable, nh\u1eadn \u0111\u1ecbnh: “Chi\u1ebfc h\u1ed9p Pandora \u0111\u00e3 \u0111\u01b0\u1ee3c m\u1edf ra. V\u1edbi c\u00e1c m\u00f4 h\u00ecnh AI ti\u00ean ti\u1ebfn h\u01a1n, ch\u00fang t\u00f4i d\u1ef1 \u0111o\u00e1n xu h\u01b0\u1edbng s\u1ed1 l\u01b0\u1ee3ng l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y s\u1ebd ti\u1ebfp t\u1ee5c t\u0103ng cao trong t\u01b0\u01a1ng lai.”<\/em><\/p>\n

Nh\u1eefng l\u1ed7 h\u1ed5ng “v\u0169 kh\u00ed h\u00f3a” c\u1ef1c k\u1ef3 nguy hi\u1ec3m<\/h3>\n

Trong danh s\u00e1ch Patch Tuesday th\u00e1ng n\u00e0y, VNCyberS<\/strong> ghi nh\u1eadn m\u1ed9t s\u1ed1 l\u1ed7i c\u00f3 kh\u1ea3 n\u0103ng b\u1ecb khai th\u00e1c t\u1eeb xa (Remote Code Execution – RCE) m\u00e0 kh\u00f4ng c\u1ea7n s\u1ef1 t\u01b0\u01a1ng t\u00e1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng:<\/p>\n

    \n
  • CVE-2026-45657 (CVSS 9.8):<\/strong> L\u1ed7i Use-After-Free trong Windows Kernel. K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 g\u1eedi c\u00e1c g\u00f3i tin m\u1ea1ng \u0111\u1ed9c h\u1ea1i \u0111\u1ec3 chi\u1ebfm to\u00e0n quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n h\u1ec7 th\u1ed1ng (SYSTEM privileges).<\/li>\n
  • CVE-2026-44815 (CVSS 9.8):<\/strong> L\u1ed7i tr\u00e0n b\u1ed9 \u0111\u1ec7m trong Windows DHCP Client. \u0110\u00e2y l\u00e0 th\u00e0nh ph\u1ea7n c\u1ed1t l\u00f5i c\u1ee7a m\u1ea1ng, cho ph\u00e9p m\u00e3 \u0111\u1ed9c l\u00e2y lan nhanh ch\u00f3ng qua m\u1ea1ng LAN m\u00e0 kh\u00f4ng c\u1ea7n th\u00f4ng tin \u0111\u0103ng nh\u1eadp.<\/li>\n
  • CVE-2026-49160:<\/strong> L\u1ed7i t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5 (DoS) li\u00ean quan \u0111\u1ebfn k\u1ef9 thu\u1eadt t\u1ea5n c\u00f4ng HTTP2\/Bomb, c\u00f3 kh\u1ea3 n\u0103ng l\u00e0m c\u1ea1n ki\u1ec7t b\u1ed9 nh\u1edb RAM c\u1ee7a m\u00e1y ch\u1ee7 web ch\u1ec9 trong v\u00e0i ch\u1ee5c gi\u00e2y.<\/li>\n<\/ul>\n

    3 l\u1ed7 h\u1ed5ng Zero-day v\u00e0 s\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a “GreenPlasma”<\/h3>\n

    B\u1ea3n v\u00e1 th\u00e1ng 6 c\u0169ng \u0111\u00e3 “ch\u1ed1t ch\u1eb7n” th\u00e0nh c\u00f4ng 3 l\u1ed7i Zero-day \u0111\u00e3 b\u1ecb r\u00f2 r\u1ec9 th\u00f4ng tin tr\u01b0\u1edbc \u0111\u00f3, bao g\u1ed3m:<\/p>\n

      \n
    1. CVE-2026-45586:<\/strong> L\u1ed7i leo thang \u0111\u1eb7c quy\u1ec1n li\u00ean quan \u0111\u1ebfn Windows Collaborative Translation Framework (CTFMON), \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn v\u1edbi t\u00ean m\u00e3 GreenPlasma<\/strong>.<\/li>\n
    2. CVE-2026-50507:<\/strong> L\u1ed7i b\u1ecf qua t\u00ednh n\u0103ng b\u1ea3o m\u1eadt BitLocker (bitskrieg).<\/li>\n
    3. CVE-2026-49160:<\/strong> L\u1ed7i HTTP.sys DoS \u0111\u00e3 \u0111\u1ec1 c\u1eadp \u1edf tr\u00ean.<\/li>\n<\/ol>\n

      Tuy nhi\u00ean, ngay sau khi Microsoft tung ra b\u1ea3n v\u00e1, nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt n\u1ed5i ti\u1ebfng “Chaotic Eclipse” \u0111\u00e3 ti\u1ebfp t\u1ee5c c\u00f4ng b\u1ed1 b\u1eb1ng ch\u1ee9ng khai th\u00e1c (PoC) cho m\u1ed9t l\u1ed7 h\u1ed5ng Zero-day kh\u00e1c mang t\u00ean RoguePlanet<\/strong> nh\u1eafm v\u00e0o Microsoft Defender. \u0110i\u1ec1u n\u00e0y cho th\u1ea5y cu\u1ed9c ch\u1ea1y \u0111ua gi\u1eefa gi\u1edbi b\u1ea3o m\u1eadt v\u00e0 tin t\u1eb7c \u0111ang tr\u1edf n\u00ean kh\u1ed1c li\u1ec7t h\u01a1n bao gi\u1edd h\u1ebft.<\/p>\n

      Khuy\u1ebfn ngh\u1ecb t\u1eeb VNCyberS<\/h3>\n

      V\u1edbi s\u1ed1 l\u01b0\u1ee3ng l\u1ed7 h\u1ed5ng k\u1ef7 l\u1ee5c n\u00e0y, vi\u1ec7c \u01b0u ti\u00ean v\u00e1 l\u1ed7i l\u00e0 b\u1eaft bu\u1ed9c \u0111\u1ed1i v\u1edbi m\u1ecdi c\u00e1 nh\u00e2n v\u00e0 t\u1ed5 ch\u1ee9c. VNCyberS<\/strong> khuy\u1ebfn ngh\u1ecb \u0111\u1ea1i ca v\u00e0 c\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean:<\/p>\n

        \n
      • \u01afu ti\u00ean c\u1eadp nh\u1eadt ngay cho c\u00e1c m\u00e1y ch\u1ee7 \u0111ang ch\u1ea1y d\u1ecbch v\u1ee5 DHCP v\u00e0 HTTP.sys.<\/li>\n
      • Ki\u1ec3m tra c\u1ea5u h\u00ecnh registry “MaxHeadersCount” m\u1edbi \u0111\u01b0\u1ee3c b\u1ed5 sung \u0111\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng DoS qua HTTP\/2.<\/li>\n
      • Lu\u00f4n b\u1eadt t\u00ednh n\u0103ng Windows Update v\u00e0 ki\u1ec3m tra k\u1ef9 tr\u1ea1ng th\u00e1i sau khi c\u1eadp nh\u1eadt \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o h\u1ec7 th\u1ed1ng \u0111\u00e3 an to\u00e0n.<\/li>\n<\/ul>\n

        VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News, Microsoft Security Response Center v\u00e0 ZDI<\/em><\/p>","protected":false},"excerpt":{"rendered":"

        R\u1ea1ng s\u00e1ng ng\u00e0y 10\/06\/2026 (theo gi\u1edd Vi\u1ec7t Nam), Microsoft \u0111\u00e3 tung ra b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt \u0111\u1ecbnh k\u1ef3 Patch Tuesday th\u00e1ng 6, ch\u00ednh th\u1ee9c x\u00e1c l\u1eadp k\u1ef7 l\u1ee5c m\u1edbi v\u1ec1 s\u1ed1 l\u01b0\u1ee3ng l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c v\u00e1 trong m\u1ed9t th\u00e1ng v\u1edbi t\u1ed5ng c\u1ed9ng 206 l\u1ed7i b\u1ea3o m\u1eadt. S\u1ef1 b\u00f9ng n\u1ed5 n\u00e0y kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf […]<\/p>\n","protected":false},"author":2,"featured_media":1633,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1601","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1601"}],"version-history":[{"count":2,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1601\/revisions"}],"predecessor-version":[{"id":1634,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1601\/revisions\/1634"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1633"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1601"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1601"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}