{"id":3039,"date":"2026-05-12T19:07:07","date_gmt":"2026-05-12T19:07:07","guid":{"rendered":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/"},"modified":"2026-05-12T19:07:07","modified_gmt":"2026-05-12T19:07:07","slug":"microsoft-may-2026-patch-tuesday-tue-may-12th","status":"publish","type":"post","link":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/","title":{"rendered":"Microsoft May 2026 Patch Tuesday, (Tue, May 12th)"},"content":{"rendered":"
\n

Today’s Microsoft patch Tuesday fixes 137 different vulnerabilities. In addition, the update addresses 137 Chromium-related issues affecting Microsoft Edge.<\/p>\n

There are no already disclosed or already exploited vulnerabilities included in today’s patches. I removed the Chromium issues from the table below and\u00a0included only the 137 Microsoft issues to make it more readable.<\/p>\n

Note that issues related to Microsoft Azure are labeled as “no customer action required.\u00a0<\/p>\n

Significant Vulnerabilities of interest:<\/p>\n

CVE-2026-41103: This vulnerability affects the\u00a0Microsoft SSO Plugin for Jira & Confluence. Exploitation could lead to an elevation of privileges. With ongoing supply chain attacks, development and CI\/CD tools like Jira and Confluence are popular targets.\u00a0<\/p>\n

CVE-2026-41089: A preauthentication remote code execution vulnerability in the Netlogon service will always be a juicy target, worth some AI tokens to write an exploit for.<\/p>\n

Other critical vulnerabilities include the usual Word and Microsoft Office issues.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Description<\/th>\n<\/tr>\n
CVE<\/th>\nDisclosed<\/th>\nExploited<\/th>\nExploitability (old versions)<\/th>\ncurrent version<\/th>\nSeverity<\/th>\nCVSS Base (AVG)<\/th>\nCVSS Temporal (AVG)<\/th>\n<\/tr>\n<\/thead>\n
.NET Core Tampering Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32175%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
.NET Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32177%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.3<\/td>\n6.4<\/td>\n<\/tr>\n
%%cve:2026-35433%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.3<\/td>\n6.4<\/td>\n<\/tr>\n
ASP.NET Core Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42899%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Azure AI Foundry Elevation of Privilege Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-35435%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.6<\/td>\n7.5<\/td>\n<\/tr>\n
Azure Cloud Shell Spoofing Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-35428%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.6<\/td>\n8.3<\/td>\n<\/tr>\n
Azure Connected Machine Agent Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40381%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Azure DevOps Information Disclosure Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-42826%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n10.0<\/td>\n8.7<\/td>\n<\/tr>\n
Azure Logic Apps Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42823%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.9<\/td>\n8.6<\/td>\n<\/tr>\n
Azure Machine Learning Notebook Spoofing Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-32207%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-33833%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.2<\/td>\n7.1<\/td>\n<\/tr>\n
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-33109%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.9<\/td>\n8.6<\/td>\n<\/tr>\n
%%cve:2026-33844%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.0<\/td>\n7.8<\/td>\n<\/tr>\n
Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-41105%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.1<\/td>\n7.1<\/td>\n<\/tr>\n
Azure Monitor Agent Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32204%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42830%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Azure SDK for Java Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33117%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.1<\/td>\n7.9<\/td>\n<\/tr>\n
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-33111%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Data Deduplication Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41095%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41109%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35424%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
M365 Copilot Information Disclosure Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-26129%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2026-26164%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
M365 Copilot for Desktop Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41614%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
Microsoft 365 Copilot for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41100%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.4<\/td>\n3.9<\/td>\n<\/tr>\n
Microsoft Cryptographic Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40377%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Data Formulator Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41094%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40417%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-33821%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.7<\/td>\n6.7<\/td>\n<\/tr>\n
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42898%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.9<\/td>\n8.6<\/td>\n<\/tr>\n
%%cve:2026-42833%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.1<\/td>\n7.9<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42838%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.4<\/td>\n4.7<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41107%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nModerate<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42891%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nModerate<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
%%cve:2026-35429%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nModerate<\/td>\n4.3<\/td>\n3.9<\/td>\n<\/tr>\n
%%cve:2026-40416%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nLow<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
Microsoft Enterprise Security Token Service (ESTS) Spoofing Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-40379%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.3<\/td>\n8.1<\/td>\n<\/tr>\n
Microsoft Excel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40360%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40359%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40362%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34329%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40419%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40418%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-35436%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-40420%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Office Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40363%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-42831%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40358%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Office Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42832%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.7<\/td>\n6.7<\/td>\n<\/tr>\n
Microsoft Outlook for iOS Tampering Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42893%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Microsoft Partner Center Spoofing Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-34327%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.2<\/td>\n7.1<\/td>\n<\/tr>\n
Microsoft Power Automate Desktop Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40374%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Microsoft PowerPoint for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41102%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41103%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.1<\/td>\n7.9<\/td>\n<\/tr>\n
Microsoft SharePoint Server Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35439%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-40368%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.0<\/td>\n7.0<\/td>\n<\/tr>\n
%%cve:2026-33110%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-33112%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-40357%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-40365%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft Team Events Portal Information Disclosure Vulnerability
\n\t\t\t(no customer action required)<\/td>\n<\/tr>\n
%%cve:2026-33823%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.6<\/td>\n8.3<\/td>\n<\/tr>\n
Microsoft Teams Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32185%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Microsoft Word Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35440%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
%%cve:2026-40421%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
Microsoft Word Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40364%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-40366%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-40361%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-40367%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Word for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41101%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
SQL Server Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40370%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Secure Boot Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41097%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
Visual Studio Code Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41613%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Visual Studio Code Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41612%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Visual Studio Code Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41611%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Visual Studio Code Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41610%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.3<\/td>\n5.5<\/td>\n<\/tr>\n
Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33839%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-33840%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34330%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34331%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows 11 Telnet Client Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35423%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.4<\/td>\n4.7<\/td>\n<\/tr>\n
Windows Admin Center Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35438%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.3<\/td>\n7.2<\/td>\n<\/tr>\n
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41086%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34344%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34345%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-35416%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-41088%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34343%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35418%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-33835%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34337%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Common Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40407%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40397%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows DNS Client Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41096%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.8<\/td>\n8.5<\/td>\n<\/tr>\n
Windows DWM Core Library Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42896%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows DWM Core Library Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35419%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
%%cve:2026-34336%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Event Logging Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33834%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32209%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.4<\/td>\n3.9<\/td>\n<\/tr>\n
Windows GDI Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35421%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Graphics Component Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40403%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Hyper-V Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40402%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.3<\/td>\n8.1<\/td>\n<\/tr>\n
Windows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33841%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-35420%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40369%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Kernel-Mode Driver Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34332%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.0<\/td>\n7.0<\/td>\n<\/tr>\n
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34339%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34341%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33838%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32161%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Windows Netlogon Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-41089%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.8<\/td>\n8.5<\/td>\n<\/tr>\n
Windows Print Spooler Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34342%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34340%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Remote Desktop Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40398%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Rich Text Edit Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-21530%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
%%cve:2026-32170%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
Windows SMB Client Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40410%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Storage Spaces Controller Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35415%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Storport Miniport Driver Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34350%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows TCP\/IP Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40405%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
%%cve:2026-40414%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
%%cve:2026-40401%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
%%cve:2026-40413%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Windows TCP\/IP Driver Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-35422%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows TCP\/IP Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34351%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40399%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34334%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows TCP\/IP Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40406%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Windows TCP\/IP Local Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33837%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows TCP\/IP Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40415%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.1<\/td>\n7.1<\/td>\n<\/tr>\n
Windows Telephony Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-42825%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-34338%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-40382%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40380%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
Windows WAN ARP Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-40408%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-34333%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-34347%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-35417%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

—
\nJohannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu<\/a>
\nTwitter<\/a>|<\/p>\n

(c) SANS Internet Storm Center. https:\/\/isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Today’s Microsoft patch Tuesday fixes 137 different vulnerabilities. In addition, the update addresses 137 Chromium-related issues affecting Microsoft Edge. There are no already disclosed or already exploited vulnerabilities included in today’s patches. I removed the Chromium issues from the table below and\u00a0included only the 137 Microsoft issues to make it more readable. Note that issues […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-container-style":"default","site-container-layout":"default","site-sidebar-layout":"default","disable-article-header":"default","disable-site-header":"default","disable-site-footer":"default","disable-content-area-spacing":"default","footnotes":""},"categories":[90],"tags":[91],"class_list":["post-3039","post","type-post","status-publish","format-standard","hentry","category-cybersecurity","tag-cybersecurity"],"yoast_head":"\nMicrosoft May 2026 Patch Tuesday, (Tue, May 12th) - Imperative Business Ventures Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft May 2026 Patch Tuesday, (Tue, May 12th) - Imperative Business Ventures Limited\" \/>\n<meta property=\"og:description\" content=\"Today’s Microsoft patch Tuesday fixes 137 different vulnerabilities. In addition, the update addresses 137 Chromium-related issues affecting Microsoft Edge. There are no already disclosed or already exploited vulnerabilities included in today’s patches. I removed the Chromium issues from the table below and\u00a0included only the 137 Microsoft issues to make it more readable. Note that issues […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/\" \/>\n<meta property=\"og:site_name\" content=\"Imperative Business Ventures Limited\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-12T19:07:07+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\"},\"headline\":\"Microsoft May 2026 Patch Tuesday, (Tue, May 12th)\",\"datePublished\":\"2026-05-12T19:07:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/\"},\"wordCount\":1868,\"keywords\":[\"Cybersecurity\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/\",\"url\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/\",\"name\":\"Microsoft May 2026 Patch Tuesday, (Tue, May 12th) - Imperative Business Ventures Limited\",\"isPartOf\":{\"@id\":\"https:\/\/blog.ibvl.in\/#website\"},\"datePublished\":\"2026-05-12T19:07:07+00:00\",\"author\":{\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.ibvl.in\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft May 2026 Patch Tuesday, (Tue, May 12th)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.ibvl.in\/#website\",\"url\":\"https:\/\/blog.ibvl.in\/\",\"name\":\"Imperative Business Ventures Limited\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.ibvl.in\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.ibvl.in\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/blog.ibvl.in\"],\"url\":\"https:\/\/blog.ibvl.in\/index.php\/author\/admin_hcbs9yw6\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft May 2026 Patch Tuesday, (Tue, May 12th) - Imperative Business Ventures Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft May 2026 Patch Tuesday, (Tue, May 12th) - Imperative Business Ventures Limited","og_description":"Today’s Microsoft patch Tuesday fixes 137 different vulnerabilities. In addition, the update addresses 137 Chromium-related issues affecting Microsoft Edge. There are no already disclosed or already exploited vulnerabilities included in today’s patches. I removed the Chromium issues from the table below and\u00a0included only the 137 Microsoft issues to make it more readable. Note that issues […]","og_url":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/","og_site_name":"Imperative Business Ventures Limited","article_published_time":"2026-05-12T19:07:07+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/#article","isPartOf":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/"},"author":{"name":"admin","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02"},"headline":"Microsoft May 2026 Patch Tuesday, (Tue, May 12th)","datePublished":"2026-05-12T19:07:07+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/"},"wordCount":1868,"keywords":["Cybersecurity"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/","url":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/","name":"Microsoft May 2026 Patch Tuesday, (Tue, May 12th) - Imperative Business Ventures Limited","isPartOf":{"@id":"https:\/\/blog.ibvl.in\/#website"},"datePublished":"2026-05-12T19:07:07+00:00","author":{"@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02"},"breadcrumb":{"@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.ibvl.in\/index.php\/2026\/05\/12\/microsoft-may-2026-patch-tuesday-tue-may-12th\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.ibvl.in\/"},{"@type":"ListItem","position":2,"name":"Microsoft May 2026 Patch Tuesday, (Tue, May 12th)"}]},{"@type":"WebSite","@id":"https:\/\/blog.ibvl.in\/#website","url":"https:\/\/blog.ibvl.in\/","name":"Imperative Business Ventures Limited","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.ibvl.in\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/55b87b72a56b1bbe9295fe5ef7a20b02","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.ibvl.in\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4d20b2cd313e4417a599678e950e6fb7d4dfa178a72f2b769335a08aaa615aa9?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/blog.ibvl.in"],"url":"https:\/\/blog.ibvl.in\/index.php\/author\/admin_hcbs9yw6\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts\/3039","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/comments?post=3039"}],"version-history":[{"count":0,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/posts\/3039\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/media?parent=3039"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/categories?post=3039"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ibvl.in\/index.php\/wp-json\/wp\/v2\/tags?post=3039"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}