MS Family May 2026 Routine Security Update Advisory
Overview
Microsoft has released security updates that address vulnerabilities in several of its products. the affected products include Apps, Azure, Developer Tools, ESU, Dynamics, Office, Open Source Software, SQL Server, Windows, and Windows Admin Center.
Vulnerability Status
the vulnerabilities addressed in this update include 16 Critical and 104 Important. the vulnerability types include Remote Code Execution, Privilege Escalation, Spoofing, Information Disclosure, Denial of Service, Security Feature Bypass, and Tampering.
Key Impacts
- in the Microsoft Office Suite, vulnerabilities have been fixed in Microsoft Office SharePoint, Microsoft Office Word, Microsoft Office Excel, Microsoft Office, Microsoft Office Click-To-Run, Microsoft Teams, and M365 Copilot.
- in the Windows family, vulnerabilities have been fixed in multiple components including Microsoft Windows DNS, Windows GDI, Windows Hyper-V, Windows Netlogon, Windows TCP/IP, Windows Win32K – GRFX, Windows Kernel, Windows Remote Desktop, and Windows Secure Boot.
- **In the Azure family, vulnerabilities have been fixed in Azure Connected Machine Agent, Azure Logic Apps, Azure Machine Learning, Azure Monitor Agent, Azure SDK for Java, and Windows Admin Center in Azure Portal.
- in the Developer Tools Suite, vulnerabilities in .NET, ASP.NET Core, GitHub Copilot and Visual Studio, Microsoft Data Formulator, and Visual Studio Code have been fixed.
- **In the Microsoft Dynamics product family, vulnerabilities are fixed in Dynamics 365 (on-premises), Dynamics Business Central, and Power Automate for Desktop.
- **In the SQL Server family, vulnerabilities are fixed in Microsoft SQL Server 2016, 2017, 2019, 2022, and 2025.
Deployment and action
the patch was made available in the May 12, 2026 Update. Microsoft provided instructions for automatic installation using the Windows Update feature or download and install using the URL in the product information.
Note
users of the product should apply the applicable security updates to keep it to the latest version.