ON May 12, 2026, Microsoft released a patch addressing 137 vulnerabilities, including significant issues within the Microsoft SSO Plugin for Jira & Confluence and a preauthentication remote code execution vulnerability in the Netlogon service. No previously disclosed vulnerabilities were part of this update. Certain vulnerabilities related to Microsoft Azure required no customer action.
Key vulnerabilities include CVE-2026-41103 (critical) affecting the Microsoft SSO Plugin, CVE-2026-41089 (critical) related to Netlogon, and several Microsoft Office vulnerabilities. Details on severity and CVSS scores for vulnerabilities are included.