See you every month. This month, too. 🚨

Microsoft released a security update (Patch Tuesday) for May 2026 to fix a total of 120 vulnerabilities. In this round, no Zero-Day vulnerabilities were exposed or actually used.

.

For Windows 11, there is a cumulative update release, code KB5089549 and KB5087420. The Windows 10 section that is in the Extended Security Update (ESU) project has been updated KB5087544.

.

In this round of updates, there are 17 critical vulnerabilities, divided into 14 Remote Code Execution - RCE vulnerabilities, two Elevation of Privilege vulnerabilities, and one Information Disclosure vulnerability.

.

A breakdown of the vulnerabilities that have been addressed is as follows:

.

- Elevation of Privilege vulnerability: 61 items

- Security Feature Bypass vulnerability: 6 items

- Remote Code Execution Vulnerability: 31 Items

- Information Disclosure: 14 items

- Denial of Service vulnerability: 8 items

- Identity forgery vulnerability (Spoofing): 13 items

.

One of the worrying points of this round is that Microsoft has fixed many vulnerabilities in Microsoft Office, Word and Excel, which can be attacked through document files where malicious code is embedded, and some cases can be attacked through Preview Pane or file preview windows, resulting in attackers being able to run code on the target machine.

.

That figure, excluding Microsoft Edge / Chromium vulnerabilities, includes Mariner, Azure, Copilot, Microsoft Teams and Microsoft Partner Center that were patched earlier in the same month.

.

Meanwhile, other software manufacturers also issued security updates in May, including Adobe, AMD, Apple, Cisco, Fortinet, Google (Android), Ivanti, Mozilla, Palo Alto Networks, SAP and vm2, with some fixing severe vulnerabilities, including Zero-Day being used to actually attack.

.

Administrators and users are advised to rush to install Microsoft security updates and related software ASAP to reduce the risk of attack through these vulnerabilities.

.

Source: bleepingcomputer

# IT should know # IT News # Includes IT matters # IT