Microsoft Might 2026 Patch Tuesday fixes 120 flaws, no zero-days

Tag CVE ID CVE Title Severity .NET CVE-2026-35433 .NET Elevation of Privilege Vulnerability Essential .NET CVE-2026-32177 .NET Elevation of Privilege Vulnerability Essential .NET CVE-2026-32175 .NET Core Tampering Vulnerability Essential AMD CPU Department CVE-2025-54518 AMD: CVE-2025-54518 CPU OP Cache Corruption Essential ASP.NET Core CVE-2026-42899 ASP.NET Core Denial of Service Vulnerability Essential Azure Related Machine Agent CVE-2026-40381 Azure Related Machine Agent Elevation of Privilege Vulnerability Essential Azure Logic Apps CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability Essential Azure Machine Studying CVE-2026-33833 Azure Machine Studying Pocket book Spoofing Vulnerability Essential Azure Monitor Agent CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability Essential Azure Monitor Agent CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability Essential Azure SDK CVE-2026-33117 Azure SDK for Java Safety Function Bypass Vulnerability Essential Data Deduplication CVE-2026-41095 Data Deduplication Elevation of Privilege Vulnerability Essential Dynamics Enterprise Central CVE-2026-40417 Microsoft Dynamics 365 Enterprise Central Elevation of Privilege Vulnerability Essential GitHub Copilot and Visible Studio CVE-2026-41109 GitHub Copilot and Visible Studio Code Safety Function Bypass Vulnerability Essential M365 Copilot CVE-2026-41100 Microsoft 365 Copilot for Android Spoofing Vulnerability Essential M365 Copilot CVE-2026-42893 Microsoft Outlook for iOS Tampering Vulnerability Essential M365 Copilot CVE-2026-26164 M365 Copilot Data Disclosure Vulnerability Crucial M365 Copilot for Desktop CVE-2026-41614 M365 Copilot for Desktop Spoofing Vulnerability Essential Microsoft Data Formulator CVE-2026-41094 Microsoft Data Formulator Distant Code Execution Vulnerability Essential Microsoft Dynamics 365 (on-premises) CVE-2026-42898 Microsoft Dynamics 365 On-Premises Distant Code Execution Vulnerability Crucial Microsoft Dynamics 365 (on-premises) CVE-2026-42833 Microsoft Dynamics 365 On-Premises Distant Code Execution Vulnerability Essential Microsoft Workplace CVE-2026-42832 Microsoft Workplace Spoofing Vulnerability Essential Microsoft Workplace CVE-2026-42831 Microsoft Workplace Distant Code Execution Vulnerability Crucial Microsoft Workplace CVE-2026-40363 Microsoft Workplace Distant Code Execution Vulnerability Crucial Microsoft Workplace CVE-2026-40419 Microsoft Workplace Click on-To-Run Elevation of Privilege Vulnerability Essential Microsoft Workplace CVE-2026-40358 Microsoft Workplace Distant Code Execution Vulnerability Crucial Microsoft Workplace Click on-To-Run CVE-2026-35436 Microsoft Workplace Click on-To-Run Elevation of Privilege Vulnerability Essential Microsoft Workplace Click on-To-Run CVE-2026-40420 Microsoft Workplace Click on-To-Run Elevation of Privilege Vulnerability Essential Microsoft Workplace Click on-To-Run CVE-2026-40418 Microsoft Workplace Click on-To-Run Elevation of Privilege Vulnerability Essential Microsoft Workplace Excel CVE-2026-40360 Microsoft Excel Data Disclosure Vulnerability Essential Microsoft Workplace Excel CVE-2026-40362 Microsoft Excel Distant Code Execution Vulnerability Essential Microsoft Workplace Excel CVE-2026-40359 Microsoft Excel Distant Code Execution Vulnerability Essential Microsoft Workplace PowerPoint CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability Essential Microsoft Workplace SharePoint CVE-2026-40368 Microsoft SharePoint Server Distant Code Execution Vulnerability Essential Microsoft Workplace SharePoint CVE-2026-35439 Microsoft SharePoint Server Distant Code Execution Vulnerability Essential Microsoft Workplace SharePoint CVE-2026-33112 Microsoft SharePoint Server Distant Code Execution Vulnerability Essential Microsoft Workplace SharePoint CVE-2026-40365 Microsoft SharePoint Server Distant Code Execution Vulnerability Crucial Microsoft Workplace SharePoint CVE-2026-40357 Microsoft SharePoint Server Distant Code Execution Vulnerability Essential Microsoft Workplace SharePoint CVE-2026-33110 Microsoft SharePoint Server Distant Code Execution Vulnerability Essential Microsoft Workplace Phrase CVE-2026-40361 Microsoft Phrase Distant Code Execution Vulnerability Crucial Microsoft Workplace Phrase CVE-2026-40367 Microsoft Phrase Distant Code Execution Vulnerability Crucial Microsoft Workplace Phrase CVE-2026-35440 Microsoft Phrase Data Disclosure Vulnerability Essential Microsoft Workplace Phrase CVE-2026-40421 Microsoft Phrase Data Disclosure Vulnerability Essential Microsoft Workplace Phrase CVE-2026-41101 Microsoft Phrase for Android Spoofing Vulnerability Essential Microsoft Workplace Phrase CVE-2026-40366 Microsoft Phrase Distant Code Execution Vulnerability Crucial Microsoft Workplace Phrase CVE-2026-40364 Microsoft Phrase Distant Code Execution Vulnerability Crucial Microsoft SSO Plugin for Jira & Confluence CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability Crucial Microsoft Groups CVE-2026-32185 Microsoft Groups Spoofing Vulnerability Essential Microsoft Home windows DNS CVE-2026-41096 Home windows DNS Shopper Distant Code Execution Vulnerability Crucial Energy Automate CVE-2026-40374 Microsoft Energy Automate Desktop Data Disclosure Vulnerability Essential SQL Server CVE-2026-40370 SQL Server Distant Code Execution Vulnerability Essential Telnet Shopper CVE-2026-35423 Home windows 11 Telnet Shopper Data Disclosure Vulnerability Essential Visible Studio Code CVE-2026-41613 Visible Studio Code Elevation of Privilege Vulnerability Essential Visible Studio Code CVE-2026-41612 Visible Studio Code Data Disclosure Vulnerability Essential Visible Studio Code CVE-2026-41610 Visible Studio Code Safety Function Bypass Vulnerability Essential Visible Studio Code CVE-2026-41611 Visible Studio Code Distant Code Execution Vulnerability Essential Home windows Admin Middle CVE-2026-41086 Home windows Admin Middle in Azure Portal Elevation of Privilege Vulnerability Essential Home windows Admin Middle CVE-2026-35438 Home windows Admin Middle Elevation of Privilege Vulnerability Essential Home windows Ancillary Operate Driver for WinSock CVE-2026-35416 Home windows Ancillary Operate Driver for WinSock Elevation of Privilege Vulnerability Essential Home windows Ancillary Operate Driver for WinSock CVE-2026-41088 Home windows Ancillary Operate Driver for WinSock Elevation of Privilege Vulnerability Essential Home windows Ancillary Operate Driver for WinSock CVE-2026-34345 Home windows Ancillary Operate Driver for WinSock Elevation of Privilege Vulnerability Essential Home windows Ancillary Operate Driver for WinSock CVE-2026-34344 Home windows Ancillary Operate Driver for WinSock Elevation of Privilege Vulnerability Essential Home windows Software Id (AppID) Subsystem CVE-2026-34343 Home windows Software Id (AppID) Subsystem Elevation of Privilege Vulnerability Essential Home windows Cloud Information Mini Filter Driver CVE-2026-34337 Home windows Cloud Information Mini Filter Driver Elevation of Privilege Vulnerability Essential Home windows Cloud Information Mini Filter Driver CVE-2026-35418 Home windows Cloud Information Mini Filter Driver Elevation of Privilege Vulnerability Essential Home windows Cloud Information Mini Filter Driver CVE-2026-33835 Home windows Cloud Information Mini Filter Driver Elevation of Privilege Vulnerability Essential Home windows Frequent Log File System Driver CVE-2026-40397 Home windows Frequent Log File System Driver Elevation of Privilege Vulnerability Essential Home windows Frequent Log File System Driver CVE-2026-40407 Home windows Frequent Log File System Driver Elevation of Privilege Vulnerability Essential Home windows Cryptographic Companies CVE-2026-40377 Microsoft Cryptographic Companies Elevation of Privilege Vulnerability Essential Home windows DWM Core Library CVE-2026-34336 Home windows DWM Core Library Data Disclosure Vulnerability Essential Home windows DWM Core Library CVE-2026-42896 Home windows DWM Core Library Elevation of Privilege Vulnerability Essential Home windows DWM Core Library CVE-2026-35419 Home windows DWM Core Library Data Disclosure Vulnerability Essential Home windows Occasion Logging Service CVE-2026-33834 Home windows Occasion Logging Service Elevation of Privilege Vulnerability Essential Home windows Filtering Platform (WFP) CVE-2026-32209 Home windows Filtering Platform (WFP) Safety Function Bypass Vulnerability Essential Home windows GDI CVE-2026-35421 Home windows GDI Distant Code Execution Vulnerability Crucial Home windows Hyper-V CVE-2026-40402 Home windows Hyper-V Elevation of Privilege Vulnerability Crucial Home windows Web Key Alternate (IKE) Protocol CVE-2026-35424 Web Key Alternate (IKE) Protocol Denial of Service Vulnerability Essential Home windows Kernel CVE-2026-40369 Home windows Kernel Elevation of Privilege Vulnerability Essential Home windows Kernel CVE-2026-33841 Home windows Kernel Elevation of Privilege Vulnerability Essential Home windows Kernel CVE-2026-35420 Home windows Kernel Elevation of Privilege Vulnerability Essential Home windows Kernel-Mode Drivers CVE-2026-34332 Home windows Kernel-Mode Driver Distant Code Execution Vulnerability Essential Home windows Kernel-Mode Drivers CVE-2026-40408 Home windows WAN ARP Driver Elevation of Privilege Vulnerability Essential Home windows LDAP – Light-weight Listing Entry Protocol CVE-2026-34339 Home windows Light-weight Listing Entry Protocol (LDAP) Denial of Service Vulnerability Essential Home windows Hyperlink-Layer Discovery Protocol (LLDP) CVE-2026-34341 Home windows Hyperlink-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability Essential Home windows Message Queuing CVE-2026-34329 Microsoft Message Queuing (MSMQ) Distant Code Execution Vulnerability Essential Home windows Message Queuing CVE-2026-33838 Home windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability Essential Home windows Native WiFi Miniport Driver CVE-2026-32161 Home windows Native WiFi Miniport Driver Distant Code Execution Vulnerability Crucial Home windows Netlogon CVE-2026-41089 Home windows Netlogon Distant Code Execution Vulnerability Crucial Home windows Print Spooler Elements CVE-2026-34342 Home windows Print Spooler Elevation of Privilege Vulnerability Essential Home windows Projected File System CVE-2026-34340 Home windows Projected File System Elevation of Privilege Vulnerability Essential Home windows Distant Desktop CVE-2026-40398 Home windows Distant Desktop Companies Elevation of Privilege Vulnerability Essential Home windows Wealthy Textual content Edit CVE-2026-21530 Home windows Wealthy Textual content Edit Elevation of Privilege Vulnerability Essential Home windows Wealthy Textual content Edit Management CVE-2026-32170 Home windows Wealthy Textual content Edit Elevation of Privilege Vulnerability Essential Home windows Safe Boot CVE-2026-41097 Safe Boot Safety Function Bypass Vulnerability Essential Home windows SMB Shopper CVE-2026-40410 Home windows SMB Shopper Elevation of Privilege Vulnerability Essential Home windows Storage Areas Controller CVE-2026-35415 Home windows Storage Areas Controller Elevation of Privilege Vulnerability Essential Home windows Storport Miniport Driver CVE-2026-34350 Home windows Storport Miniport Driver Denial of Service Vulnerability Essential Home windows TCP/IP CVE-2026-34351 Home windows TCP/IP Elevation of Privilege Vulnerability Essential Home windows TCP/IP CVE-2026-33837 Home windows TCP/IP Native Elevation of Privilege Vulnerability Essential Home windows TCP/IP CVE-2026-40406 Home windows TCP/IP Data Disclosure Vulnerability Essential Home windows TCP/IP CVE-2026-40414 Home windows TCP/IP Denial of Service Vulnerability Essential Home windows TCP/IP CVE-2026-34334 Home windows TCP/IP Elevation of Privilege Vulnerability Essential Home windows TCP/IP CVE-2026-40399 Home windows TCP/IP Elevation of Privilege Vulnerability Essential Home windows TCP/IP CVE-2026-35422 Home windows TCP/IP Driver Safety Function Bypass Vulnerability Essential Home windows TCP/IP CVE-2026-40413 Home windows TCP/IP Denial of Service Vulnerability Essential Home windows TCP/IP CVE-2026-40415 Home windows TCP/IP Distant Code Execution Vulnerability Essential Home windows TCP/IP CVE-2026-40401 Home windows TCP/IP Denial of Service Vulnerability Essential Home windows TCP/IP CVE-2026-40405 Home windows TCP/IP Denial of Service Vulnerability Essential Home windows Telephony Service CVE-2026-40382 Home windows Telephony Service Elevation of Privilege Vulnerability Essential Home windows Telephony Service CVE-2026-34338 Home windows Telephony Service Elevation of Privilege Vulnerability Essential Home windows Telephony Service CVE-2026-42825 Home windows Telephony Service Elevation of Privilege Vulnerability Essential Home windows Quantity Supervisor Extension Driver CVE-2026-40380 Home windows Quantity Supervisor Extension Driver Distant Code Execution Vulnerability Essential Home windows Win32K – GRFX CVE-2026-33839 Win32k Elevation of Privilege Vulnerability Essential Home windows Win32K – GRFX CVE-2026-40403 Home windows Graphics Part Distant Code Execution Vulnerability Crucial Home windows Win32K – GRFX CVE-2026-34347 Home windows Win32k Elevation of Privilege Vulnerability Essential Home windows Win32K – GRFX CVE-2026-34333 Home windows Win32k Elevation of Privilege Vulnerability Essential Home windows Win32K – GRFX CVE-2026-34330 Win32k Elevation of Privilege Vulnerability Essential Home windows Win32K – GRFX CVE-2026-34331 Win32k Elevation of Privilege Vulnerability Essential Home windows Win32K – ICOMP CVE-2026-35417 Home windows Win32k Elevation of Privilege Vulnerability Essential Home windows Win32K – ICOMP CVE-2026-33840 Win32k Elevation of Privilege Vulnerability Essential