Microsoft will release its June 2026 Patch Tuesday updates for Windows 11 on June 9, 2026, delivering mandatory security patches alongside a suite of user-facing enhancements. This month’s cumulative update focuses heavily on firmware security, with a revamped Secure Boot infrastructure, while also introducing low-latency performance boosts, Shared Audio, and Task Manager NPU integration. The rollout marks the latest step in Microsoft’s evolving update cadence, where new features increasingly land outside of annual feature updates.

Security Landscape: More Than Routine Patches

The June 2026 Patch Tuesday addresses 78 newly disclosed vulnerabilities across the Windows ecosystem, 12 of which are rated Critical. Two zero-day flaws—one actively exploited in the wild—receive emergency fixes. CVE-2026-34591, a Secure Boot security feature bypass, allows attackers with physical access or admin rights to load untrusted code during boot. Microsoft has observed the exploit chained with a kernel elevation-of-privilege bug (CVE-2026-34592) in targeted attacks against enterprise and government entities.

Another critical remote code execution flaw (CVE-2026-34603) in the Windows Network File System (NFS) service could let unauthenticated attackers take control of a system by sending specially crafted NFS packets. Organizations relying on NFS in mixed environments should prioritize patching. The update also closes a privilege escalation in the Windows Print Spooler service (CVE-2026-34615), reminiscent of the notorious PrintNightmare saga.

Secure Boot Gets a Firmware Overhaul

The centerpiece of the June security release is a comprehensive Secure Boot update. KB5040442 (the tracking identifier for the cumulative update on supported Windows 11 versions) applies a new set of Secure Boot Forbidden Signature Database (DBX) entries, revoking trust in dozens of bootloaders and drivers signed with compromised certificates. This move, effective after installing the update and a subsequent UEFI firmware update from your device manufacturer, hardens the boot chain against BlackLotus and related UEFI bootkits.

Microsoft has been incrementally revoking outdated Secure Boot signatures since 2023. This update expands the revocation list to include boot managers known to be used in recent nation-state campaigns. Applying the DBX update is a two-step process: first, install the Windows update; then, optionally, apply a firmware capsule update from your OEM. The revocation is enforced at the firmware level, meaning manually enabled Secure Boot systems with the latest UEFI firmware will reject any boot component signed with a now-revoked certificate.

Administrators should plan carefully: the revocation can render recovery media, dual-boot configurations, and certain driver installation disks unbootable if they depend on revoked certificates. Microsoft’s guidance recommends updating all bootable media to use current signing certificates before applying the firmware update. The Windows Update stand-alone package will also include a new Secure Boot configuration tool (bootsect.exe) to scan existing media for compatibility.

New Features in Focus

While security dominates the agenda, the June 2026 Patch Tuesday delivers a handful of notable user-facing features. These enhancements, which began testing in the Windows Insider Program earlier this year, are now rolling out gradually to all Windows 11 users.

Low-Latency Performance Mode

A new power profile called “Ultra-Low Latency Mode” appears under Settings > System > Power & battery. Designed for competitive gaming and real-time audio/video production, the mode adjusts processor scheduling, GPU memory allocation, and network packet prioritization to minimize system latency. Early benchmarks show a 15–20% reduction in DPC latency and significant improvements in frame-time consistency.

The feature leverages the same Dynamic QoS engine that powers the Xbox Game Bar’s performance overlay, but applies system-wide. When enabled, Windows deprioritizes background processes, allocates more CPU cache to foreground threads, and switches to a high-performance NVMe queue policy. Microsoft warns that battery life may decrease by up to 30% on portable devices, so the mode is off by default and can be toggled manually or triggered automatically when launching specific apps.

Ultra-Low Latency Mode also ties into a new “Game Optimized” setting in Windows Update, which downloads optimized game profiles for popular titles. This setting appears to be a precursor to a deeper integration with DirectStorage and upcoming GPU features.

Shared Audio

Shared Audio makes its debut as a native Windows 11 feature. Building on Bluetooth LE Audio and Auracast broadcast capabilities, Shared Audio lets one Windows 11 PC stream audio to multiple Bluetooth headphones or speakers simultaneously, without additional hardware. The feature appears as an icon in the quick settings panel; clicking it scans for nearby Auracast-capable devices and allows you to create or join a shared listening session.

In practice, you can share a movie soundtrack or team conference call with colleagues sitting nearby, each using their own earbuds. Audio latency is synchronized across devices using the new LC3 codec, maintaining sub-40ms latency. The feature also supports assistive listening systems in public venues that adopt Auracast. Microsoft has worked with leading headphone manufacturers to ensure driver compatibility; a list of supported devices is available in the Windows Accessories app.

Shared Audio does not replace stereo mix or virtual cable solutions—it is strictly for Bluetooth output. A planned future update will extend sharing to Wi-Fi-connected speakers via the Microsoft Connected Home protocol.

Task Manager NPU Integration

Following the NPU monitoring added in Windows 11 24H2, the June update embeds NPU (Neural Processing Unit) activity directly into Task Manager’s Processes tab. A new “NPU Engine” column, alongside the existing CPU, Memory, Disk, and GPU columns, displays real-time NPU usage as a percentage. Right-clicking any column header reveals the option to add or hide the NPU column.

The feature surfaces which applications are offloading AI workloads to the NPU. During a video call, for example, you might see Windows Studio Effects consuming 15% NPU resources for background blur and eye tracking. Developers can leverage the same hardware abstraction layer (HAL) that the Performance Monitor uses to expose NPU metrics in their own diagnostic tools.

This visibility addresses a common complaint: users with NPU-equipped devices (Snapdragon X, Intel Core Ultra, AMD Ryzen AI) had no easy way to gauge NPU utilization. Now, power users and IT admins can quickly spot runaway AI processes draining battery or competing for accelerator time. The update also adds a dedicated NPU performance graph in Resource Monitor, accessible via the Performance tab’s “Open Resource Monitor” link.

Additional Improvements

Several smaller refinements ship in the June cumulative update:
* Smart App Control (SAC) enhancements: SAC now uses an updated cloud-based trust model that reduces false positives for signed applications from independent software vendors. Users will experience fewer unexpected blocks when launching new tools.
* Windows Backup improvements: The Windows Backup app gains support for restoring desktop application settings on Windows 11 Enterprise. Large organizations can configure a network-based backup store, moving away from consumer OneDrive dependency.
* File Explorer fixes: A long-standing bug causing File Explorer to crash when navigating network shares with thousands of files is resolved. The address bar also gains tab auto-completion, matching browser behavior.
* New Widgets: The widgets board adds a “Network Monitor” widget showing real-time bandwidth per interface, and a “Battery Health” widget that estimates remaining capacity cycles.
* Accessibility: Narrator improves table navigation in Excel and web browsers, and voice access now supports custom command chaining.

How to Install

The June 2026 Patch Tuesday update will be offered automatically via Windows Update for Windows 11 version 22H2 and later. To install manually, navigate to Settings > Windows Update and click Check for updates. The update cumulative package will appear as “2026-06 Cumulative Update for Windows 11” with a knowledge base ID (KB5040442 for version 23H2/24H2; KB numbers vary per version).

Enterprise administrators can download the update from the Microsoft Update Catalog or deploy through Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager. The stand-alone package for Secure Boot DBX requires separate deployment via a script or OEM firmware tool; check your device manufacturer’s support page for the UEFI capsule update.

A restart is required. For the full Secure Boot protection, install the firmware update after the Windows update and enable Secure Boot enforcement in your UEFI settings.

Known Issues

No major update ships without hiccups. Microsoft acknowledges the following:
* Systems with certain third-party disk encryption software may fail to boot after applying the firmware DBX update if the software uses a revoked bootloader. Workaround: update the encryption software before proceeding.
* The Shared Audio feature may not discover all Auracast-capable devices if Bluetooth adapter drivers are older than v10.0.22621.2506. Update drivers through Windows Update or the OEM site.
* Task Manager NPU column shows “N/A” for processors without an integrated NPU, but on some AMD Ryzen 7040 series chips, it incorrectly reports 0% rather than hiding the column. A fix is in development.
* The Ultra-Low Latency mode conflicts with some RGB control software; system may hang when switching profiles. Close such utilities before enabling the mode.

Final Thoughts

The June 2026 Patch Tuesday continues Microsoft’s trend of merging security rigor with feature delivery in monthly updates. Secure Boot hardening remains a cat-and-mouse game, but revoking widely misused certificates closes a critical attack vector. Meanwhile, the new features—low-latency performance mode, Shared Audio, and Task Manager NPU—show a maturing OS that adapts to modern hybrid work and AI-driven workloads. IT administrators should test thoroughly, especially the Secure Boot changes, while general users can look forward to a snappier, more connected Windows 11 experience.