Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days


Tag

CVE ID

CVE Title

Severity


.NET

CVE-2026-35433

.NET Elevation of Privilege Vulnerability

Important


.NET

CVE-2026-32177

.NET Elevation of Privilege Vulnerability

Important


.NET

CVE-2026-32175

.NET Core Tampering Vulnerability

Important


AMD CPU Branch

CVE-2025-54518

AMD: CVE-2025-54518 CPU OP Cache Corruption

Important


ASP.NET Core

CVE-2026-42899

ASP.NET Core Denial of Service Vulnerability

Important


Azure Connected Machine Agent

CVE-2026-40381

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Important


Azure Logic Apps

CVE-2026-42823

Azure Logic Apps Elevation of Privilege Vulnerability

Important


Azure Machine Learning

CVE-2026-33833

Azure Machine Learning Notebook Spoofing Vulnerability

Important


Azure Monitor Agent

CVE-2026-32204

Azure Monitor Agent Elevation of Privilege Vulnerability

Important


Azure Monitor Agent

CVE-2026-42830

Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability

Important


Azure SDK

CVE-2026-33117

Azure SDK for Java Security Feature Bypass Vulnerability

Important


Data Deduplication

CVE-2026-41095

Data Deduplication Elevation of Privilege Vulnerability

Important


Dynamics Business Central

CVE-2026-40417

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Important


GitHub Copilot and Visual Studio

CVE-2026-41109

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Important


M365 Copilot

CVE-2026-41100

Microsoft 365 Copilot for Android Spoofing Vulnerability

Important


M365 Copilot

CVE-2026-42893

Microsoft Outlook for iOS Tampering Vulnerability

Important


M365 Copilot

CVE-2026-26164

M365 Copilot Information Disclosure Vulnerability

Critical


M365 Copilot for Desktop

CVE-2026-41614

M365 Copilot for Desktop Spoofing Vulnerability

Important


Microsoft Data Formulator

CVE-2026-41094

Microsoft Data Formulator Remote Code Execution Vulnerability

Important


Microsoft Dynamics 365 (on-premises)

CVE-2026-42898

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Critical


Microsoft Dynamics 365 (on-premises)

CVE-2026-42833

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Important


Microsoft Office

CVE-2026-42832

Microsoft Office Spoofing Vulnerability

Important


Microsoft Office

CVE-2026-42831

Microsoft Office Remote Code Execution Vulnerability

Critical


Microsoft Office

CVE-2026-40363

Microsoft Office Remote Code Execution Vulnerability

Critical


Microsoft Office

CVE-2026-40419

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Important


Microsoft Office

CVE-2026-40358

Microsoft Office Remote Code Execution Vulnerability

Critical


Microsoft Office Click-To-Run

CVE-2026-35436

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Important


Microsoft Office Click-To-Run

CVE-2026-40420

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Important


Microsoft Office Click-To-Run

CVE-2026-40418

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Important


Microsoft Office Excel

CVE-2026-40360

Microsoft Excel Information Disclosure Vulnerability

Important


Microsoft Office Excel

CVE-2026-40362

Microsoft Excel Remote Code Execution Vulnerability

Important


Microsoft Office Excel

CVE-2026-40359

Microsoft Excel Remote Code Execution Vulnerability

Important


Microsoft Office PowerPoint

CVE-2026-41102

Microsoft PowerPoint for Android Spoofing Vulnerability

Important


Microsoft Office SharePoint

CVE-2026-40368

Microsoft SharePoint Server Remote Code Execution Vulnerability

Important


Microsoft Office SharePoint

CVE-2026-35439

Microsoft SharePoint Server Remote Code Execution Vulnerability

Important


Microsoft Office SharePoint

CVE-2026-33112

Microsoft SharePoint Server Remote Code Execution Vulnerability

Important


Microsoft Office SharePoint

CVE-2026-40365

Microsoft SharePoint Server Remote Code Execution Vulnerability

Critical


Microsoft Office SharePoint

CVE-2026-40357

Microsoft SharePoint Server Remote Code Execution Vulnerability

Important


Microsoft Office SharePoint

CVE-2026-33110

Microsoft SharePoint Server Remote Code Execution Vulnerability

Important


Microsoft Office Word

CVE-2026-40361

Microsoft Word Remote Code Execution Vulnerability

Critical


Microsoft Office Word

CVE-2026-40367

Microsoft Word Remote Code Execution Vulnerability

Critical


Microsoft Office Word

CVE-2026-35440

Microsoft Word Information Disclosure Vulnerability

Important


Microsoft Office Word

CVE-2026-40421

Microsoft Word Information Disclosure Vulnerability

Important


Microsoft Office Word

CVE-2026-41101

Microsoft Word for Android Spoofing Vulnerability

Important


Microsoft Office Word

CVE-2026-40366

Microsoft Word Remote Code Execution Vulnerability

Critical


Microsoft Office Word

CVE-2026-40364

Microsoft Word Remote Code Execution Vulnerability

Critical


Microsoft SSO Plugin for Jira & Confluence

CVE-2026-41103

Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability

Critical


Microsoft Teams

CVE-2026-32185

Microsoft Teams Spoofing Vulnerability

Important


Microsoft Windows DNS

CVE-2026-41096

Windows DNS Client Remote Code Execution Vulnerability

Critical


Power Automate

CVE-2026-40374

Microsoft Power Automate Desktop Information Disclosure Vulnerability

Important


SQL Server

CVE-2026-40370

SQL Server Remote Code Execution Vulnerability

Important


Telnet Client

CVE-2026-35423

Windows 11 Telnet Client Information Disclosure Vulnerability

Important


Visual Studio Code

CVE-2026-41613

Visual Studio Code Elevation of Privilege Vulnerability

Important


Visual Studio Code

CVE-2026-41612

Visual Studio Code Information Disclosure Vulnerability

Important


Visual Studio Code

CVE-2026-41610

Visual Studio Code Security Feature Bypass Vulnerability

Important


Visual Studio Code

CVE-2026-41611

Visual Studio Code Remote Code Execution Vulnerability

Important


Windows Admin Center

CVE-2026-41086

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Important


Windows Admin Center

CVE-2026-35438

Windows Admin Center Elevation of Privilege Vulnerability

Important


Windows Ancillary Function Driver for WinSock

CVE-2026-35416

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important


Windows Ancillary Function Driver for WinSock

CVE-2026-41088

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important


Windows Ancillary Function Driver for WinSock

CVE-2026-34345

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important


Windows Ancillary Function Driver for WinSock

CVE-2026-34344

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important


Windows Application Identity (AppID) Subsystem

CVE-2026-34343

Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability

Important


Windows Cloud Files Mini Filter Driver

CVE-2026-34337

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Important


Windows Cloud Files Mini Filter Driver

CVE-2026-35418

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Important


Windows Cloud Files Mini Filter Driver

CVE-2026-33835

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Important


Windows Common Log File System Driver

CVE-2026-40397

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Important


Windows Common Log File System Driver

CVE-2026-40407

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Important


Windows Cryptographic Services

CVE-2026-40377

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Important


Windows DWM Core Library

CVE-2026-34336

Windows DWM Core Library Information Disclosure Vulnerability

Important


Windows DWM Core Library

CVE-2026-42896

Windows DWM Core Library Elevation of Privilege Vulnerability

Important


Windows DWM Core Library

CVE-2026-35419

Windows DWM Core Library Information Disclosure Vulnerability

Important


Windows Event Logging Service

CVE-2026-33834

Windows Event Logging Service Elevation of Privilege Vulnerability

Important


Windows Filtering Platform (WFP)

CVE-2026-32209

Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability

Important


Windows GDI

CVE-2026-35421

Windows GDI Remote Code Execution Vulnerability

Critical


Windows Hyper-V

CVE-2026-40402

Windows Hyper-V Elevation of Privilege Vulnerability

Critical


Windows Internet Key Exchange (IKE) Protocol

CVE-2026-35424

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

Important


Windows Kernel

CVE-2026-40369

Windows Kernel Elevation of Privilege Vulnerability

Important


Windows Kernel

CVE-2026-33841

Windows Kernel Elevation of Privilege Vulnerability

Important


Windows Kernel

CVE-2026-35420

Windows Kernel Elevation of Privilege Vulnerability

Important


Windows Kernel-Mode Drivers

CVE-2026-34332

Windows Kernel-Mode Driver Remote Code Execution Vulnerability

Important


Windows Kernel-Mode Drivers

CVE-2026-40408

Windows WAN ARP Driver Elevation of Privilege Vulnerability

Important


Windows LDAP – Lightweight Directory Access Protocol

CVE-2026-34339

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Important


Windows Link-Layer Discovery Protocol (LLDP)

CVE-2026-34341

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

Important


Windows Message Queuing

CVE-2026-34329

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Important


Windows Message Queuing

CVE-2026-33838

Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Important


Windows Native WiFi Miniport Driver

CVE-2026-32161

Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

Critical


Windows Netlogon

CVE-2026-41089

Windows Netlogon Remote Code Execution Vulnerability

Critical


Windows Print Spooler Components

CVE-2026-34342

Windows Print Spooler Elevation of Privilege Vulnerability

Important


Windows Projected File System

CVE-2026-34340

Windows Projected File System Elevation of Privilege Vulnerability

Important


Windows Remote Desktop

CVE-2026-40398

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Important


Windows Rich Text Edit

CVE-2026-21530

Windows Rich Text Edit Elevation of Privilege Vulnerability

Important


Windows Rich Text Edit Control

CVE-2026-32170

Windows Rich Text Edit Elevation of Privilege Vulnerability

Important


Windows Secure Boot

CVE-2026-41097

Secure Boot Security Feature Bypass Vulnerability

Important


Windows SMB Client

CVE-2026-40410

Windows SMB Client Elevation of Privilege Vulnerability

Important


Windows Storage Spaces Controller

CVE-2026-35415

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Important


Windows Storport Miniport Driver

CVE-2026-34350

Windows Storport Miniport Driver Denial of Service Vulnerability

Important


Windows TCP/IP

CVE-2026-34351

Windows TCP/IP Elevation of Privilege Vulnerability

Important


Windows TCP/IP

CVE-2026-33837

Windows TCP/IP Local Elevation of Privilege Vulnerability

Important


Windows TCP/IP

CVE-2026-40406

Windows TCP/IP Information Disclosure Vulnerability

Important


Windows TCP/IP

CVE-2026-40414

Windows TCP/IP Denial of Service Vulnerability

Important


Windows TCP/IP

CVE-2026-34334

Windows TCP/IP Elevation of Privilege Vulnerability

Important


Windows TCP/IP

CVE-2026-40399

Windows TCP/IP Elevation of Privilege Vulnerability

Important


Windows TCP/IP

CVE-2026-35422

Windows TCP/IP Driver Security Feature Bypass Vulnerability

Important


Windows TCP/IP

CVE-2026-40413

Windows TCP/IP Denial of Service Vulnerability

Important


Windows TCP/IP

CVE-2026-40415

Windows TCP/IP Remote Code Execution Vulnerability

Important


Windows TCP/IP

CVE-2026-40401

Windows TCP/IP Denial of Service Vulnerability

Important


Windows TCP/IP

CVE-2026-40405

Windows TCP/IP Denial of Service Vulnerability

Important


Windows Telephony Service

CVE-2026-40382

Windows Telephony Service Elevation of Privilege Vulnerability

Important


Windows Telephony Service

CVE-2026-34338

Windows Telephony Service Elevation of Privilege Vulnerability

Important


Windows Telephony Service

CVE-2026-42825

Windows Telephony Service Elevation of Privilege Vulnerability

Important


Windows Volume Manager Extension Driver

CVE-2026-40380

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

Important


Windows Win32K – GRFX

CVE-2026-33839

Win32k Elevation of Privilege Vulnerability

Important


Windows Win32K – GRFX

CVE-2026-40403

Windows Graphics Component Remote Code Execution Vulnerability

Critical


Windows Win32K – GRFX

CVE-2026-34347

Windows Win32k Elevation of Privilege Vulnerability

Important


Windows Win32K – GRFX

CVE-2026-34333

Windows Win32k Elevation of Privilege Vulnerability

Important


Windows Win32K – GRFX

CVE-2026-34330

Win32k Elevation of Privilege Vulnerability

Important


Windows Win32K – GRFX

CVE-2026-34331

Win32k Elevation of Privilege Vulnerability

Important


Windows Win32K – ICOMP

CVE-2026-35417

Windows Win32k Elevation of Privilege Vulnerability

Important


Windows Win32K – ICOMP

CVE-2026-33840

Win32k Elevation of Privilege Vulnerability

Important




Source link