Patch days / May 2026

Microsoft Patch Tuesday — May 2026

Tuesday, 12 May 2026

Vulnerabilities: 127
Critical: 10
High: 93
Zero-days: 1
Public exploit: 5

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.1
CVE-2026-42897 Zero-day Public exploit Microsoft Exchange Server Spoofing Vulnerability
EPSS 71%

Critical 10

Critical 9.9
CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability
Critical 9.9
CVE-2026-42898 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
EPSS 1.2%
Critical 9.8
CVE-2026-41089 Public exploit Windows Netlogon Remote Code Execution Vulnerability
EPSS 80%
Critical 9.8
CVE-2026-41096 Public exploit Windows DNS Client Remote Code Execution Vulnerability
EPSS 2.7%
Critical 9.6
CVE-2026-41615 Microsoft Authenticator Information Disclosure Vulnerability
Critical 9.3
CVE-2026-40379 Azure Entra ID Spoofing Vulnerability
Critical 9.3
CVE-2026-40402 Windows Hyper-V Elevation of Privilege Vulnerability
Critical 9.1
CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability
Critical 9.1
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
EPSS 5.4%
Critical 9.1
CVE-2026-42833 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2026-34344 Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40369 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 4.7%

All vulnerabilities 127

Critical10 Show

Critical 9.9
CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability
Critical 9.9
CVE-2026-42898 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
EPSS 1.2%
Critical 9.8
CVE-2026-41089 Public exploit Windows Netlogon Remote Code Execution Vulnerability
EPSS 80%
Critical 9.8
CVE-2026-41096 Public exploit Windows DNS Client Remote Code Execution Vulnerability
EPSS 2.7%
Critical 9.6
CVE-2026-41615 Microsoft Authenticator Information Disclosure Vulnerability
Critical 9.3
CVE-2026-40379 Azure Entra ID Spoofing Vulnerability
Critical 9.3
CVE-2026-40402 Windows Hyper-V Elevation of Privilege Vulnerability
Critical 9.1
CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability
Critical 9.1
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
EPSS 5.4%
Critical 9.1
CVE-2026-42833 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

High93 Show

High 8.1
CVE-2026-42897 Zero-day Public exploit Microsoft Exchange Server Spoofing Vulnerability
EPSS 71%
High 8.8
CVE-2026-33110 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 2%
High 8.8
CVE-2026-33112 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 31%
High 8.8
CVE-2026-34329 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
High 8.8
CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
High 8.8
CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 2%
High 8.8
CVE-2026-40357 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2026-40365 Microsoft SharePoint Server Remote Code Execution Vulnerability
High 8.8
CVE-2026-40370 SQL Server Remote Code Execution Vulnerability
High 8.8
CVE-2026-40403 Windows Graphics Component Remote Code Execution Vulnerability
High 8.8
CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
High 8.8
CVE-2026-41086 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
High 8.8
CVE-2026-41094 Microsoft Data Formulator Remote Code Execution Vulnerability
High 8.8
CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
High 8.8
CVE-2026-41613 Visual Studio Code Elevation of Privilege Vulnerability
High 8.4
CVE-2026-40358 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2026-40361 Microsoft Outlook and Word Remote Code Execution Vulnerability
High 8.4
CVE-2026-40363 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2026-40364 Microsoft Word Remote Code Execution Vulnerability
EPSS 4.4%
High 8.4
CVE-2026-40366 Microsoft Word Remote Code Execution Vulnerability
High 8.4
CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability
High 8.3
CVE-2026-35438 Windows Admin Center Elevation of Privilege Vulnerability
High 8.2
CVE-2026-33833 Azure Machine Learning Notebook Spoofing Vulnerability
High 8.1
CVE-2026-40415 Windows TCP/IP Remote Code Execution Vulnerability
High 8.0
CVE-2026-34332 Windows Kernel-Mode Driver Remote Code Execution Vulnerability
High 8.0
CVE-2026-40368 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 1.8%
High 7.8
CVE-2026-34344 Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40369 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 4.7%
High 7.8
CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability
High 7.8
CVE-2026-33834 Windows Event Logging Service Elevation of Privilege Vulnerability
High 7.8
CVE-2026-33835 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 2.1%
High 7.8
CVE-2026-33837 Windows TCP/IP Local Elevation of Privilege Vulnerability
EPSS 1.8%
High 7.8
CVE-2026-33838 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
High 7.8
CVE-2026-33840 Win32k Elevation of Privilege Vulnerability
EPSS 2%
High 7.8
CVE-2026-33841 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2026-34330 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2026-34333 Windows Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2026-34334 Windows TCP/IP Elevation of Privilege Vulnerability
High 7.8
CVE-2026-34336 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2026-34337 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2026-34338 Windows Telephony Service Elevation of Privilege Vulnerability
High 7.8
CVE-2026-34343 Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability
High 7.8
CVE-2026-34351 Windows TCP/IP Elevation of Privilege Vulnerability
High 7.8
CVE-2026-35415 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
High 7.8
CVE-2026-35417 Windows Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2026-35418 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2026-35420 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2026-35421 Windows GDI Remote Code Execution Vulnerability
High 7.8
CVE-2026-40359 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-40360 Microsoft Excel Information Disclosure Vulnerability
High 7.8
CVE-2026-40362 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40382 Windows Telephony Service Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40397 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40398 Windows Remote Desktop Services Elevation of Privilege Vulnerability
EPSS 2.7%
High 7.8
CVE-2026-40399 Windows TCP/IP Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40407 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40408 Windows WAN ARP Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40417 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40418 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
High 7.8
CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
High 7.8
CVE-2026-41088 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2026-41095 Data Deduplication Elevation of Privilege Vulnerability
High 7.8
CVE-2026-41611 Visual Studio Code Remote Code Execution Vulnerability
High 7.8
CVE-2026-42831 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2026-42896 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.7
CVE-2026-33821 Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
High 7.7
CVE-2026-42832 Microsoft Office Spoofing Vulnerability
High 7.5
CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
High 7.5
CVE-2026-35424 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
EPSS 1.2%
High 7.5
CVE-2026-40405 Windows TCP/IP Denial of Service Vulnerability
EPSS 1.1%
High 7.5
CVE-2026-40406 Windows TCP/IP Information Disclosure Vulnerability
High 7.5
CVE-2026-42899 ASP.NET Core Denial of Service Vulnerability
EPSS 2.4%
High 7.4
CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability
High 7.4
CVE-2026-40414 Windows TCP/IP Denial of Service Vulnerability
High 7.4
CVE-2026-41107 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
High 7.4
CVE-2026-42893 Microsoft Outlook for iOS Tampering Vulnerability
High 7.3
CVE-2026-32177 .NET Elevation of Privilege Vulnerability
High 7.3
CVE-2026-35433 .NET Elevation of Privilege Vulnerability
High 7.1
CVE-2026-40401 Windows TCP/IP Denial of Service Vulnerability
High 7.1
CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability
High 7.1
CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability
High 7.0
CVE-2026-33839 Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2026-34331 Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2026-34340 Windows Projected File System Elevation of Privilege Vulnerability
High 7.0
CVE-2026-34341 Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
High 7.0
CVE-2026-34342 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.0
CVE-2026-34345 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2026-34347 Windows Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2026-35416 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.0
CVE-2026-40410 Windows SMB Client Elevation of Privilege Vulnerability
High 7.0
CVE-2026-42825 Windows Telephony Service Elevation of Privilege Vulnerability

Medium24 Show

Medium 6.7
CVE-2026-21530 Windows Rich Text Edit Elevation of Privilege Vulnerability
Medium 6.7
CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability
Medium 6.7
CVE-2026-41097 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.4%
Medium 6.5
CVE-2026-34350 Windows Storport Miniport Driver Denial of Service Vulnerability
Medium 6.5
CVE-2026-35422 Windows TCP/IP Driver Security Feature Bypass Vulnerability
Medium 6.5
CVE-2026-40374 Microsoft Power Automate Desktop Information Disclosure Vulnerability
Medium 6.5
CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
Medium 6.5
CVE-2026-42891 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Medium 6.3
CVE-2026-41610 Visual Studio Code Security Feature Bypass Vulnerability
Medium 6.2
CVE-2026-40380 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Medium 6.2
CVE-2026-41614 M365 Copilot for Desktop Spoofing Vulnerability
Medium 5.5
CVE-2026-32185 Microsoft Teams Spoofing Vulnerability
Medium 5.5
CVE-2026-34339 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Medium 5.5
CVE-2026-35419 Windows DWM Core Library Information Disclosure Vulnerability
Medium 5.5
CVE-2026-35440 Microsoft Word Information Disclosure Vulnerability
Medium 5.5
CVE-2026-41612 Visual Studio Code Information Disclosure Vulnerability
Medium 5.4
CVE-2026-35423 Windows 11 Telnet Client Information Disclosure Vulnerability
Medium 5.4
CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Medium 4.4
CVE-2026-32209 Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
Medium 4.4
CVE-2026-41100 Microsoft 365 Copilot for Android Spoofing Vulnerability
Medium 4.3
CVE-2026-32175 .NET Core Tampering Vulnerability
Medium 4.3
CVE-2026-35429 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Medium 4.3
CVE-2026-40416 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Medium 4.3
CVE-2026-40421 Microsoft Word Information Disclosure Vulnerability

Most affected products

Windows Server 2025 64 · 2 crit.
Windows Server 2025 (Server Core installation) 64 · 2 crit.
Windows 11 Version 24H2 59 · 1 crit.
Windows 11 Version 25H2 59 · 1 crit.
Windows 11 version 26H1 59 · 1 crit.
Windows Server 2022 57 · 2 crit.
Windows Server 2022, 23H2 Edition (Server Core installation) 57 · 2 crit.
Windows 11 version 23H2 55 · 2 crit.
Windows Server 2019 54 · 1 crit.
Windows Server 2019 (Server Core installation) 54 · 1 crit.
Windows 10 Version 21H2 53
Windows 10 Version 22H2 53

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (12 May). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →