# Security updates released in May 2026 - Web page: https://patchblox.com/security/patch-radar/2026/05 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 59 | 96 | 3 | 3 | | macOS | 3 | 80 | 0 | 0 | | Linux | 6,012 | 3,077 | 57 | 57 | ## Patch Tuesday, May 12, 2026 114 CVEs, 15 Critical, 0 exploited, 0 publicly disclosed, in 40 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 67 | 0 | 0 | | Windows 11 | 63 | 0 | 0 | | Windows 10 | 54 | 0 | 0 | | Microsoft Office | 12 | 0 | 0 | | SharePoint Server | 9 | 1 | 1 | | .NET and Visual Studio | 4 | 0 | 0 | | Dynamics 365 | 4 | 0 | 0 | | SQL Server | 1 | 0 | 0 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5002863](https://patchblox.com/security/data/fix/microsoft/kb5002863.md) | Microsoft SharePoint Server Subscription Edition | May 12, 2026 | Patch now | 9 | 1 | CVE-2026-45659 | | [KB5002868](https://patchblox.com/security/data/fix/microsoft/kb5002868.md) | Microsoft SharePoint Enterprise Server 2016 | May 12, 2026 | Patch now | 9 | 1 | CVE-2026-45659 | | [KB5002870](https://patchblox.com/security/data/fix/microsoft/kb5002870.md) | Microsoft SharePoint Server 2019 | May 12, 2026 | Patch now | 9 | 1 | CVE-2026-45659 | | [KB5087423](https://patchblox.com/security/data/fix/microsoft/kb5087423.md) | Windows Server 2025, Windows Server 2025 (Server Core installation) | May 12, 2026 | Urgent | 66 | 0 | CVE-2026-41089 | | [KB5087539](https://patchblox.com/security/data/fix/microsoft/kb5087539.md) | Windows Server 2025, Windows Server 2025 (Server Core installation) | May 12, 2026 | Urgent | 66 | 0 | CVE-2026-41089 | | [KB5087541](https://patchblox.com/security/data/fix/microsoft/kb5087541.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | May 12, 2026 | Urgent | 58 | 0 | CVE-2026-41089 | | [KB5087545](https://patchblox.com/security/data/fix/microsoft/kb5087545.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | May 12, 2026 | Urgent | 58 | 0 | CVE-2026-41089 | | [KB5087424](https://patchblox.com/security/data/fix/microsoft/kb5087424.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | May 12, 2026 | Urgent | 56 | 0 | CVE-2026-41089 | | [KB5087538](https://patchblox.com/security/data/fix/microsoft/kb5087538.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | May 12, 2026 | Urgent | 55 | 0 | CVE-2026-41089 | | [KB5087537](https://patchblox.com/security/data/fix/microsoft/kb5087537.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | May 12, 2026 | Urgent | 47 | 0 | CVE-2026-41089 | | [KB5087471](https://patchblox.com/security/data/fix/microsoft/kb5087471.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | May 12, 2026 | Urgent | 42 | 0 | CVE-2026-41089 | | [KB5087470](https://patchblox.com/security/data/fix/microsoft/kb5087470.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | May 12, 2026 | Urgent | 39 | 0 | CVE-2026-41089 | | [KB5089548](https://patchblox.com/security/data/fix/microsoft/kb5089548.md) | Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 Version 26H1 for x64-based Systems - extra, Windows 11 version 26H1 for x64-based Systems | May 12, 2026 | Urgent | 62 | 0 | CVE-2026-40369 | | [KB5089466](https://patchblox.com/security/data/fix/microsoft/kb5089466.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | May 12, 2026 | Urgent | 61 | 0 | CVE-2026-40369 | | [KB5089549](https://patchblox.com/security/data/fix/microsoft/kb5089549.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | May 12, 2026 | Urgent | 61 | 0 | CVE-2026-40369 | | [KB5002858](https://patchblox.com/security/data/fix/microsoft/kb5002858.md) | Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | May 12, 2026 | Urgent | 6 | 0 | CVE-2026-40364 | | [KB5087420](https://patchblox.com/security/data/fix/microsoft/kb5087420.md) | Windows 11 Version 23H2 for ARM64-based Systems | May 12, 2026 | Urgent | 56 | 0 | CVE-2026-41096 | | [KB5087544](https://patchblox.com/security/data/fix/microsoft/kb5087544.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems | May 12, 2026 | Urgent | 54 | 0 | CVE-2026-40398 | | [KB5078943](https://patchblox.com/security/data/fix/microsoft/kb5078943.md) | Microsoft Dynamics 365 (on-premises) version 9.0, Microsoft Dynamics 365 (on-premises) version 9.1 | May 12, 2026 | Urgent | 3 | 0 | CVE-2026-42898 | | [KB5002869](https://patchblox.com/security/data/fix/microsoft/kb5002869.md) | Microsoft SharePoint Enterprise Server 2016 | May 20, 2026 | Urgent | 1 | 0 | CVE-2026-40367 | | [KB5002872](https://patchblox.com/security/data/fix/microsoft/kb5002872.md) | Microsoft SharePoint Server 2019 | May 20, 2026 | Urgent | 1 | 0 | CVE-2026-40367 | | [KB5002866](https://patchblox.com/security/data/fix/microsoft/kb5002866.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | May 12, 2026 | Urgent | 2 | 0 | CVE-2026-40363 | | [KB5093446](https://patchblox.com/security/data/fix/microsoft/kb5093446.md) | .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows | May 12, 2026 | High | 4 | 0 | CVE-2026-42899 | | [KB5093447](https://patchblox.com/security/data/fix/microsoft/kb5093447.md) | .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows | May 12, 2026 | High | 4 | 0 | CVE-2026-42899 | | [KB5093448](https://patchblox.com/security/data/fix/microsoft/kb5093448.md) | .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows | May 12, 2026 | High | 4 | 0 | CVE-2026-42899 | | [KB5087048](https://patchblox.com/security/data/fix/microsoft/kb5087048.md) | Microsoft .NET Framework 3.5 on Windows Server 2012 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087049](https://patchblox.com/security/data/fix/microsoft/kb5087049.md) | Microsoft .NET Framework 3.5 on Windows Server 2012 R2 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087051](https://patchblox.com/security/data/fix/microsoft/kb5087051.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087053](https://patchblox.com/security/data/fix/microsoft/kb5087053.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems and 1 more | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087054](https://patchblox.com/security/data/fix/microsoft/kb5087054.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087055](https://patchblox.com/security/data/fix/microsoft/kb5087055.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H1 for x64-based Systems | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087058](https://patchblox.com/security/data/fix/microsoft/kb5087058.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087059](https://patchblox.com/security/data/fix/microsoft/kb5087059.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087061](https://patchblox.com/security/data/fix/microsoft/kb5087061.md) | Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087063](https://patchblox.com/security/data/fix/microsoft/kb5087063.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087064](https://patchblox.com/security/data/fix/microsoft/kb5087064.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems and 1 more | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087065](https://patchblox.com/security/data/fix/microsoft/kb5087065.md) | Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087066](https://patchblox.com/security/data/fix/microsoft/kb5087066.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087067](https://patchblox.com/security/data/fix/microsoft/kb5087067.md) | Microsoft .NET Framework 4.8 on Windows Server 2012 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087068](https://patchblox.com/security/data/fix/microsoft/kb5087068.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 | May 18, 2026 | High | 2 | 0 | CVE-2026-35433 | | [KB5087062](https://patchblox.com/security/data/fix/microsoft/kb5087062.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 | May 18, 2026 | High | 1 | 0 | CVE-2026-32177 | | [KB5087069](https://patchblox.com/security/data/fix/microsoft/kb5087069.md) | Microsoft .NET Framework 4.8 on Windows Server 2012 R2 | May 18, 2026 | High | 1 | 0 | CVE-2026-32177 | | [KB5089270](https://patchblox.com/security/data/fix/microsoft/kb5089270.md) | Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5089271](https://patchblox.com/security/data/fix/microsoft/kb5089271.md) | Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5089899](https://patchblox.com/security/data/fix/microsoft/kb5089899.md) | Microsoft SQL Server 2025 for x64-based Systems (CU4) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5089900](https://patchblox.com/security/data/fix/microsoft/kb5089900.md) | Microsoft SQL Server 2022 for x64-based Systems (CU 24) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5090347](https://patchblox.com/security/data/fix/microsoft/kb5090347.md) | Microsoft SQL Server 2017 for x64-based Systems (GDR) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5090354](https://patchblox.com/security/data/fix/microsoft/kb5090354.md) | Microsoft SQL Server 2017 for x64-based Systems (CU 31) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5090407](https://patchblox.com/security/data/fix/microsoft/kb5090407.md) | Microsoft SQL Server 2019 for x64-based Systems (CU 32) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5090408](https://patchblox.com/security/data/fix/microsoft/kb5090408.md) | Microsoft SQL Server 2019 for x64-based Systems (GDR) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5091158](https://patchblox.com/security/data/fix/microsoft/kb5091158.md) | Microsoft SQL Server 2022 for x64-based Systems (GDR) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5091223](https://patchblox.com/security/data/fix/microsoft/kb5091223.md) | Microsoft SQL Server 2025 for x64-based Systems (GDR) | May 12, 2026 | High | 1 | 0 | CVE-2026-40370 | | [KB5002865](https://patchblox.com/security/data/fix/microsoft/kb5002865.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | May 12, 2026 | High | 3 | 0 | CVE-2026-40360 | | [KB5002871](https://patchblox.com/security/data/fix/microsoft/kb5002871.md) | Office Online Server | May 12, 2026 | High | 3 | 0 | CVE-2026-40360 | | [KB5086068](https://patchblox.com/security/data/fix/microsoft/kb5086068.md) | Microsoft Dynamics 365 Business Central 2024 Release Wave 2 | May 12, 2026 | High | 1 | 0 | CVE-2026-40417 | | [KB5086069](https://patchblox.com/security/data/fix/microsoft/kb5086069.md) | Microsoft Dynamics 365 Business Central Release Wave 1 2025 | May 12, 2026 | High | 1 | 0 | CVE-2026-40417 | | [KB5086070](https://patchblox.com/security/data/fix/microsoft/kb5086070.md) | Microsoft Dynamics 365 Business Central Release Wave 2 2025 | May 12, 2026 | High | 1 | 0 | CVE-2026-40417 | | [KB5093780](https://patchblox.com/security/data/fix/microsoft/kb5093780.md) | Microsoft Dynamics 365 Business Central 2026 Release Wave 1 | May 12, 2026 | High | 1 | 0 | CVE-2026-40417 | | [KB5002578](https://patchblox.com/security/data/fix/microsoft/kb5002578.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | May 12, 2026 | Routine | 1 | 0 | CVE-2026-21530 | ## macOS updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [Tahoe 26.5](https://patchblox.com/security/data/fix/macos/tahoe-26.5.md) | Tahoe | May 11, 2026 | High | 74 | 0 | CVE-2026-43661 | | [Sequoia 15.7.7](https://patchblox.com/security/data/fix/macos/sequoia-15.7.7.md) | Sequoia | May 11, 2026 | High | 46 | 0 | CVE-2026-43668 | | [Sonoma 14.8.7](https://patchblox.com/security/data/fix/macos/sonoma-14.8.7.md) | Sonoma | May 11, 2026 | High | 43 | 0 | CVE-2026-43668 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Ubuntu | 2,905 | 324 | 0 | 0 | | Debian | 2,212 | 2,212 | 2 | 2 | | rocky | 245 | 522 | 8 | 8 | | almalinux | 213 | 358 | 14 | 14 | | Red Hat | 183 | 398 | 14 | 14 | | amzn | 125 | 761 | 6 | 6 | | ol | 103 | 231 | 12 | 12 | | Fedora | 21 | 49 | 1 | 1 | | sles | 5 | 7 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [RXSA-2026:13577](https://patchblox.com/security/data/fix/linux/rxsa-2026-13577.md) | kernel on rocky 8 | May 21, 2026 | Patch now | 7 | 1 | CVE-2026-31431 | | [RHSA-2026:13577](https://patchblox.com/security/data/fix/linux/rhsa-2026-13577.md) | bpftool, kernel, kernel-abi-stablelists and 20 more on RHEL 8 | May 15, 2026 | Patch now | 7 | 1 | CVE-2026-31431 | | [RHSA-2026:13578](https://patchblox.com/security/data/fix/linux/rhsa-2026-13578.md) | kernel-rt, kernel-rt-core, kernel-rt-debug and 9 more on RHEL 8 | May 15, 2026 | Patch now | 7 | 1 | CVE-2026-31431 | | [ALSA-2026:13577](https://patchblox.com/security/data/fix/linux/alsa-2026-13577.md) | bpftool, kernel, kernel-abi-stablelists and 22 more on almalinux 8 | May 5, 2026 | Patch now | 7 | 1 | CVE-2026-31431 | | [ALSA-2026:13578](https://patchblox.com/security/data/fix/linux/alsa-2026-13578.md) | kernel-rt, kernel-rt-core, kernel-rt-debug and 7 more on almalinux 8 | May 5, 2026 | Patch now | 7 | 1 | CVE-2026-31431 | | [ALAS2023-2026-1649](https://patchblox.com/security/data/fix/linux/alas2023-2026-1649.md) | bpftool6.18, bpftool6.18-debuginfo, kernel-livepatch-6.18.20-41.237 and 15 more on amzn 2023 | May 4, 2026 | Patch now | 7 | 1 | CVE-2026-31431 | | [RLSA-2026:13578](https://patchblox.com/security/data/fix/linux/rlsa-2026-13578.md) | kernel-rt on rocky 8 | May 6, 2026 | Patch now | 6 | 1 | CVE-2026-31431 | | [ELSA-2026-13577](https://patchblox.com/security/data/fix/linux/elsa-2026-13577.md) | bpftool, kernel, kernel-abi-stablelists and 17 more on ol 8 | May 5, 2026 | Patch now | 6 | 1 | CVE-2026-31431 | | [ALAS2023-2026-1650](https://patchblox.com/security/data/fix/linux/alas2023-2026-1650.md) | bpftool6.12, bpftool6.12-debuginfo, kernel-livepatch-6.12.80-106.156 and 15 more on amzn 2023 | May 4, 2026 | Patch now | 5 | 1 | CVE-2026-31431 | | [ALAS2023-2026-1651](https://patchblox.com/security/data/fix/linux/alas2023-2026-1651.md) | bpftool, bpftool-debuginfo, kernel and 15 more on amzn 2023 | May 4, 2026 | Patch now | 5 | 1 | CVE-2026-31431 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo