cve.bz

Microsoft Patch Tuesday, May 2026: the CVEs

Filter

Microsoft Patch Tuesday May 2026: the CVEs Microsoft published on 12 May 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025, Sep 2025, Aug 2025, Jul 2025, Jun 2025, May 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.5CVE-2026-42899EPSS 2.4%

    Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  2. 9.9CVE-2026-42898EPSS 1.2%

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

  3. 7.8CVE-2026-42896EPSS 0.3%

    Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  4. 7.5CVE-2026-42893EPSS 0.4%

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.

  5. 6.5CVE-2026-42891EPSS 0.3%

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  6. 5.4CVE-2026-42838EPSS 0.2%

    Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  7. 9.1CVE-2026-42833EPSS 0.7%

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

  8. 5.5CVE-2026-42832EPSS 0.2%

    Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

  9. 7.8CVE-2026-42831EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  10. 6.5CVE-2026-42830EPSS 0.5%

    Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2026-42825EPSS 0.2%

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  12. 9.9CVE-2026-42823EPSS 0.6%

    Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

  13. 6.2CVE-2026-41614EPSS 0.4%

    Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.

  14. 8.8CVE-2026-41613EPSS 0.5%

    Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

  15. 5.5CVE-2026-41612EPSS 0.5%

    Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

  16. 3.3CVE-2026-41611EPSS 0.4%

    Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.

  17. 5.0CVE-2026-41610EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  18. 8.8CVE-2026-41109EPSS 0.9%

    Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.

  19. 7.4CVE-2026-41107EPSS 0.7%

    External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  20. 9.1CVE-2026-41103EPSS 5.4%

    Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.

  21. 5.5CVE-2026-41102EPSS 0.3%

    Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.

  22. 5.5CVE-2026-41101EPSS 0.3%

    Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.

  23. 4.4CVE-2026-41100EPSS 0.2%

    Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.

  24. 6.7CVE-2026-41097EPSS 1.4%

    Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  25. 9.8CVE-2026-41096EPSS 2.7%

    Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

  26. 7.8CVE-2026-41095EPSS 0.3%

    Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

  27. 8.8CVE-2026-41094EPSS 0.8%

    Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.

  28. 9.8CVE-2026-41089EPSS 78%

    Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

  29. 7.8CVE-2026-41088EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  30. 8.8CVE-2026-41086EPSS 0.4%

    Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

  31. 4.3CVE-2026-40421EPSS 0.6%

    Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  32. 8.8CVE-2026-40420EPSS 0.2%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2026-40419EPSS 0.3%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2026-40418EPSS 0.3%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2026-40417EPSS 0.3%

    Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.

  36. 4.3CVE-2026-40416EPSS 0.3%

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  37. 8.1CVE-2026-40415EPSS 0.8%

    Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

  38. 7.4CVE-2026-40414EPSS 0.5%

    Windows TCP/IP Denial of Service Vulnerability

  39. 7.4CVE-2026-40413EPSS 0.4%

    Windows TCP/IP Denial of Service Vulnerability

  40. 7.0CVE-2026-40410EPSS 0.2%

    Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-40408EPSS 0.3%

    Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-40407EPSS 0.3%

    Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  43. 7.5CVE-2026-40406EPSS 0.9%

    Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

  44. 7.5CVE-2026-40405EPSS 1.1%

    Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

  45. 8.8CVE-2026-40403EPSS 0.4%

    Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

  46. 9.3CVE-2026-40402EPSS 0.3%

    Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

  47. 7.1CVE-2026-40401EPSS 0.3%

    Windows TCP/IP Denial of Service Vulnerability

  48. 7.8CVE-2026-40399EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  49. 7.8CVE-2026-40398EPSS 2.7%

    Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2026-40397EPSS 0.3%

    Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  51. 7.8CVE-2026-40382EPSS 0.2%

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  52. 7.8CVE-2026-40381EPSS 0.2%

    Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

  53. 6.2CVE-2026-40380EPSS 0.5%

    Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.

  54. 7.5CVE-2026-40379EPSS 0.9%

    Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

  55. 7.8CVE-2026-40377EPSS 0.3%

    Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

  56. 6.5CVE-2026-40374EPSS 0.9%

    Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.

  57. 8.8CVE-2026-40370EPSS 0.6%

    External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

  58. 7.8CVE-2026-40369EPSS 4.7%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  59. 8.0CVE-2026-40368EPSS 1.8%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  60. 8.4CVE-2026-40367EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  61. 8.4CVE-2026-40366EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  62. 8.8CVE-2026-40365EPSS 1.0%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  63. 8.4CVE-2026-40364EPSS 4.4%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  64. 8.4CVE-2026-40363EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  65. 7.8CVE-2026-40362EPSS 0.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  66. 8.4CVE-2026-40361EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  67. 7.8CVE-2026-40360EPSS 0.4%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  68. 7.8CVE-2026-40359EPSS 0.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  69. 8.4CVE-2026-40358EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  70. 8.8CVE-2026-40357EPSS 1.7%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  71. 5.5CVE-2026-35440EPSS 0.4%

    Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  72. 8.8CVE-2026-35439EPSS 2.0%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  73. 8.3CVE-2026-35438EPSS 0.6%

    Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

  74. 8.8CVE-2026-35436EPSS 0.2%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  75. 7.3CVE-2026-35433EPSS 0.8%

    Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

  76. 4.3CVE-2026-35429EPSS 0.5%

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  77. 7.5CVE-2026-35424EPSS 1.2%

    Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

  78. 5.4CVE-2026-35423EPSS 0.7%

    Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.

  79. 6.5CVE-2026-35422EPSS 0.6%

    Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.

  80. 7.8CVE-2026-35421EPSS 0.5%

    Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.

  81. 7.8CVE-2026-35420EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  82. 5.5CVE-2026-35419EPSS 0.4%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

  83. 7.0CVE-2026-35418EPSS 0.2%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  84. 7.8CVE-2026-35417EPSS 0.3%

    Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  85. 7.0CVE-2026-35416EPSS 1.6%

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  86. 7.8CVE-2026-35415EPSS 0.3%

    Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

  87. 7.0CVE-2026-34351EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  88. 6.5CVE-2026-34350EPSS 0.8%

    Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network.

  89. 7.0CVE-2026-34347EPSS 0.3%

    Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  90. 7.0CVE-2026-34345EPSS 0.2%

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  91. 7.8CVE-2026-34344EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  92. 7.8CVE-2026-34343EPSS 0.3%

    Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.

  93. 7.0CVE-2026-34342EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  94. 7.0CVE-2026-34341EPSS 0.2%

    Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

  95. 7.0CVE-2026-34340EPSS 0.2%

    Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  96. 5.5CVE-2026-34339EPSS 0.3%

    Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally.

  97. 7.8CVE-2026-34338EPSS 0.2%

    Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

  98. 7.0CVE-2026-34337EPSS 0.2%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  99. 7.8CVE-2026-34336EPSS 0.2%

    Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  100. 7.0CVE-2026-34334EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.