Microsoft's security release of 12 May 2026
Patch Tuesday, May 2026, page 2
As of , CISA lists none of the 125 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first by our order: CVE-2026-40369, Windows Kernel Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2026-32161Windows Native WiFi Miniport Driver Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 102 | CVE-2026-40401Windows TCP/IP Denial of Service | None | Not on CISA's list | 7.1 High | 0.00 |
| 103 | CVE-2026-41101Microsoft Word for Android Spoofing | None | Not on CISA's list | 7.1 High | 0.00 |
| 104 | CVE-2026-41102Microsoft PowerPoint for Android Spoofing | None | Not on CISA's list | 7.1 High | 0.00 |
| 105 | CVE-2026-33839Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 106 | CVE-2026-34331Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 107 | CVE-2026-34340Windows Projected File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 108 | CVE-2026-34341Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 109 | CVE-2026-34342Windows Print Spooler Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 110 | CVE-2026-34345Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 111 | CVE-2026-34347Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 112 | CVE-2026-35416Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 113 | CVE-2026-40410Windows SMB Client Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 114 | CVE-2026-42825Windows Telephony Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 115 | CVE-2026-21530Windows Rich Text Edit Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 116 | CVE-2026-32170Windows Rich Text Edit Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 117 | CVE-2026-42891Microsoft Edge (Chromium-based) for Android Spoofing | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 118 | CVE-2026-40380Windows Volume Manager Extension Driver Remote Code Execution | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 119 | CVE-2026-41614M365 Copilot for Desktop Spoofing | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 120 | CVE-2026-34339Windows Lightweight Directory Access Protocol (LDAP) Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 121 | CVE-2026-35419Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 122 | CVE-2026-42838Microsoft Edge (Chromium-based) Elevation of Privilege | None | Not on CISA's list | 5.4 Medium | 0.00 |
| 123 | CVE-2026-32209Windows Filtering Platform (WFP) Security Feature Bypass | None | Not on CISA's list | 4.4 Medium | 0.00 |
| 124 | CVE-2026-41100Microsoft 365 Copilot for Android Spoofing | None | Not on CISA's list | 4.4 Medium | 0.00 |
| 125 | CVE-2026-40416Microsoft Edge (Chromium-based) for Android Spoofing | None | Not on CISA's list | 4.3 Medium | 0.00 |