{"id":12805,"date":"2026-05-13T04:03:35","date_gmt":"2026-05-13T04:03:35","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/05\/13\/32980\/"},"modified":"2026-05-13T04:03:35","modified_gmt":"2026-05-13T04:03:35","slug":"32980","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/05\/13\/32980\/","title":{"rendered":"Microsoft May 2026 Patch Tuesday, (Tue, May 12th)"},"content":{"rendered":"

Microsoft May 2026 Patch Tuesday, (Tue, May 12th)
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

Today’s Microsoft patch Tuesday fixes 137 different vulnerabilities. In addition, the update addresses 137 Chromium-related issues affecting Microsoft Edge.<\/p>\n

There are no already disclosed or already exploited vulnerabilities included in today’s patches. I removed the Chromium issues from the table below and\u00a0included only the 137 Microsoft issues to make it more readable.<\/p>\n

Note that issues related to Microsoft Azure are labeled as “no customer action required.\u00a0<\/p>\n

Significant Vulnerabilities of interest:<\/p>\n

CVE-2026-41103: This vulnerability affects the\u00a0Microsoft SSO Plugin for Jira & Confluence. Exploitation could lead to an elevation of privileges. With ongoing supply chain attacks, development and CI\/CD tools like Jira and Confluence are popular targets.\u00a0<\/p>\n

CVE-2026-41089: A preauthentication remote code execution vulnerability in the Netlogon service will always be a juicy target, worth some AI tokens to write an exploit for.<\/p>\n

Other critical vulnerabilities include the usual Word and Microsoft Office issues.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Description<\/th>\n<\/tr>\n
CVE<\/th>\nDisclosed<\/th>\nExploited<\/th>\nExploitability (old versions)<\/th>\ncurrent version<\/th>\nSeverity<\/th>\nCVSS Base (AVG)<\/th>\nCVSS Temporal (AVG)<\/th>\n<\/tr>\n<\/thead>\n
.NET Core Tampering Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32175%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
.NET Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32177%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.3<\/td>\n6.4<\/td>\n<\/tr>\n
%%cve:2026-35433%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.3<\/td>\n6.4<\/td>\n<\/tr>\n
ASP.NET Core Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42899%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Azure AI Foundry Elevation of Privilege Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-35435%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.6<\/td>\n7.5<\/td>\n<\/tr>\n
Azure Cloud Shell Spoofing Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-35428%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.6<\/td>\n8.3<\/td>\n<\/tr>\n
Azure Connected Machine Agent Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40381%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Azure DevOps Information Disclosure Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-42826%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n10.0<\/td>\n8.7<\/td>\n<\/tr>\n
Azure Logic Apps Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42823%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.9<\/td>\n8.6<\/td>\n<\/tr>\n
Azure Machine Learning Notebook Spoofing Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-32207%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-33833%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.2<\/td>\n7.1<\/td>\n<\/tr>\n
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-33109%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.9<\/td>\n8.6<\/td>\n<\/tr>\n
%%cve:2026-33844%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.0<\/td>\n7.8<\/td>\n<\/tr>\n
Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-41105%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.1<\/td>\n7.1<\/td>\n<\/tr>\n
Azure Monitor Agent Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32204%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42830%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Azure SDK for Java Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33117%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.1<\/td>\n7.9<\/td>\n<\/tr>\n
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-33111%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Data Deduplication Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41095%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41109%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35424%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
M365 Copilot Information Disclosure Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-26129%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2026-26164%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
M365 Copilot for Desktop Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41614%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
Microsoft 365 Copilot for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41100%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.4<\/td>\n3.9<\/td>\n<\/tr>\n
Microsoft Cryptographic Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40377%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Data Formulator Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41094%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40417%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-33821%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.7<\/td>\n6.7<\/td>\n<\/tr>\n
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42898%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.9<\/td>\n8.6<\/td>\n<\/tr>\n
%%cve:2026-42833%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.1<\/td>\n7.9<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42838%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.4<\/td>\n4.7<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41107%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nModerate<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42891%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nModerate<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
%%cve:2026-35429%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nModerate<\/td>\n4.3<\/td>\n3.9<\/td>\n<\/tr>\n
%%cve:2026-40416%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nLow<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
Microsoft Enterprise Security Token Service (ESTS) Spoofing Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-40379%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.3<\/td>\n8.1<\/td>\n<\/tr>\n
Microsoft Excel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40360%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40359%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40362%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34329%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40419%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40418%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-35436%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-40420%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Office Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40363%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-42831%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40358%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Office Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42832%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.7<\/td>\n6.7<\/td>\n<\/tr>\n
Microsoft Outlook for iOS Tampering Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42893%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Microsoft Partner Center Spoofing Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-34327%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.2<\/td>\n7.1<\/td>\n<\/tr>\n
Microsoft Power Automate Desktop Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40374%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Microsoft PowerPoint for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41102%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41103%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.1<\/td>\n7.9<\/td>\n<\/tr>\n
Microsoft SharePoint Server Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35439%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-40368%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.0<\/td>\n7.0<\/td>\n<\/tr>\n
%%cve:2026-33110%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-33112%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-40357%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-40365%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Team Events Portal Information Disclosure Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-33823%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.6<\/td>\n8.3<\/td>\n<\/tr>\n
Microsoft Teams Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32185%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Microsoft Word Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35440%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
%%cve:2026-40421%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
Microsoft Word Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40364%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-40366%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-40361%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-40367%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Word for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41101%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
SQL Server Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40370%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Secure Boot Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41097%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
Visual Studio Code Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41613%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Visual Studio Code Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41612%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Visual Studio Code Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41611%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Visual Studio Code Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41610%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.3<\/td>\n5.5<\/td>\n<\/tr>\n
Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33839%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-33840%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34330%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34331%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows 11 Telnet Client Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35423%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.4<\/td>\n4.7<\/td>\n<\/tr>\n
Windows Admin Center Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35438%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.3<\/td>\n7.2<\/td>\n<\/tr>\n
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41086%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34344%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34345%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-35416%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-41088%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34343%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35418%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-33835%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34337%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Common Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40407%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40397%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows DNS Client Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41096%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.8<\/td>\n8.5<\/td>\n<\/tr>\n
Windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42896%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows DWM Core Library Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35419%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
%%cve:2026-34336%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Event Logging Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33834%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32209%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.4<\/td>\n3.9<\/td>\n<\/tr>\n
Windows GDI Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35421%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Graphics Component Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40403%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Hyper-V Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40402%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.3<\/td>\n8.1<\/td>\n<\/tr>\n
Windows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33841%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-35420%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40369%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Kernel-Mode Driver Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34332%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.0<\/td>\n7.0<\/td>\n<\/tr>\n
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34339%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34341%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33838%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32161%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Windows Netlogon Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41089%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.8<\/td>\n8.5<\/td>\n<\/tr>\n
Windows Print Spooler Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34342%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34340%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Remote Desktop Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40398%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Rich Text Edit Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-21530%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
%%cve:2026-32170%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
Windows SMB Client Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40410%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Storage Spaces Controller Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35415%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Storport Miniport Driver Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34350%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows TCP\/IP Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40405%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2026-40414%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
%%cve:2026-40401%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
%%cve:2026-40413%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Windows TCP\/IP Driver Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35422%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows TCP\/IP Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34351%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40399%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34334%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows TCP\/IP Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40406%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Windows TCP\/IP Local Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33837%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows TCP\/IP Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40415%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.1<\/td>\n7.1<\/td>\n<\/tr>\n
Windows Telephony Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42825%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-34338%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40382%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40380%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
Windows WAN ARP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40408%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34333%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34347%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-35417%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

—
\nJohannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu<\/a>
\nTwitter<\/a>|<\/p>\n

(c) SANS Internet Storm Center. https:\/\/isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.<\/p><\/div>\n

\t

\n
<\/BR><\/p>\n

\t

\n
<\/BR>
\nGo to isc.sans.edu<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft May 2026 Patch Tuesday, (Tue, May 12th) Today’s Microsoft patch Tuesday fixes 137 different vulnerabilities. In addition, the update addresses 137 Chromium-related issues affecting Microsoft Edge. There are no already disclosed or already exploited vulnerabilities included in today’s patches. I removed the Chromium issues from the table below and\u00a0included only the 137 Microsoft issues […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56],"tags":[69],"class_list":["post-12805","post","type-post","status-publish","format-standard","hentry","category-isc-sans-edu","tag-isc-sans-edu"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/12805"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=12805"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/12805\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=12805"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=12805"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=12805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}