Microsoft
May 2026 Security Updates
2026-May May 12, 2026 Source: Vendor
Imported by the Microsoft release catcher from the MSRC CVRF API (2026-May, revision 2026-07-27T01:44:00Z). 1128 vulnerabilities, 159 of them carrying an acknowledgement. Draft — review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://msrc.microsoft.com/update-guide/releaseNote/2026-May
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
210 lines
Showing 201–210 of 210 · page 5 of 5
CVE-2026-32177
BR2026-0000-002714
unclaimed
.NET Elevation of Privilege Vulnerability
Credited as Ky0toFu
CVE-2026-33840
BR2026-0000-002715
unclaimed
Win32k Elevation of Privilege Vulnerability
Credited as Minjea Park, ji9umi
CVE-2026-33840
BR2026-0000-002716
unclaimed
Win32k Elevation of Privilege Vulnerability
Credited as Jmini with Stealien
CVE-2026-33840
BR2026-0000-002717
unclaimed
Win32k Elevation of Privilege Vulnerability
Credited as Kentaro Kawane with GMO Cybersecurity by Ierae, Inc.
CVE-2026-33840
BR2026-0000-002718
unclaimed
Win32k Elevation of Privilege Vulnerability
Credited as Minjea Park with Stealien
CVE-2026-33840
BR2026-0000-002719
unclaimed
Win32k Elevation of Privilege Vulnerability
Credited as Jongseong Kim (nevul37) with UIUC
CVE-2026-33840
BR2026-0000-002720
unclaimed
Win32k Elevation of Privilege Vulnerability
Credited as Hwiwon Lee (hwiwonl) with UIUC
CVE-2026-33840
BR2026-0000-002721
unclaimed
Win32k Elevation of Privilege Vulnerability
Credited as DongJun Kim (smlijun) with UIUC
CVE-2026-33840
BR2026-0000-002722
unclaimed
Win32k Elevation of Privilege Vulnerability
Credited as Younggi Park (grill66) with UIUC
CVE-2026-41086
BR2026-0000-002723
unclaimed
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Credited as N4ichimi