Microsoft's monthly security releases
Patch Tuesday
As of , Microsoft's latest Patch Tuesday, on , has 965 CVE records; CISA lists 2 of them as exploited. The next is due on Tuesday .
Every release
CVEs in each release
What these pages count
Microsoft releases its security updates on the second Tuesday of each month. Each release page lists the CVE records Microsoft published as a CVE Numbering Authority that day, in our patch-first order, with CISA's list of exploited vulnerabilities, CISA's SSVC exploitation value, EPSS and CVSS for each. We read the records from the CVE List, not from Microsoft's update guide. Other sites count a release differently (cloud-service fixes, CVEs of other organisations such as Chromium's, fixes published earlier in the month), so their totals differ from ours.
No page for January 2026: the CVE List holds fewer than 10 Microsoft records dated that day, so there is nothing to rank.