SANS ISC
Microsoft May 2026 Patch Tuesday, (Tue, May 12th)
On May 12, 2026, Microsoft released a patch addressing 137 vulnerabilities, including significant issues within the Microsoft SSO Plugin for Jira & Confluence and a preauthentication remote code execution vulnerability in the Netlogon service. No previously disclosed vulnerabilities were part of this update. Certain vulnerabilities related to Microsoft Azure required no customer action.
Key vulnerabilities include CVE-2026-41103 (critical) affecting the Microsoft SSO Plugin, CVE-2026-41089 (critical) related to Netlogon, and several Microsoft Office vulnerabilities. Details on severity and CVSS scores for vulnerabilities are included.
AI summary of the original article from SANS ISC, written automatically by a language model. Quotes, figures and names come from that article; check it before relying on a detail. Read the original · How summaries are made
Story timeline CVE-2026-41103
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 12 May · 18:10 UTC | SecurityWeek | Microsoft Patches 137 Vulnerabilities |
| Tue 12 May · 19:20 UTC | SANS ISC | Microsoft May 2026 Patch Tuesday, (Tue, May 12th) (this article) |
| Tue 12 May · 22:10 UTC | Krebs on Security | Patch Tuesday, May 2026 Edition |
| Wed 13 May · 02:31 UTC | Rapid7 | Microsoft Patch Tuesday patches Netlogon and DNS RCE flaws |