Microsoft Releases May 2026 Patch Tuesday Updates Addressing Over 120 Vulnerabilities

Microsoft released its May 2026 Patch Tuesday updates, addressing over 120 CVE-numbered vulnerabilities across its products, including Windows, Windows Server, and Microsoft Office. None of the vulnerabilities were actively exploited or publicly disclosed prior to patching. Among the fixes, four critical remote code execution (RCE) flaws in Microsoft Word were highlighted, specifically CVE-2026-40361 and CVE-2026-40364, which require prioritization according to Tenable’s senior staff research engineer. The updates were published on May 12, 2026, with no zero-day vulnerabilities reported in this release.