Microsoft · Security update · May 12, 2026
KB5091223: May 2026 security update
KB5091223, released May 12, 2026, fixes 1 CVE in Microsoft SQL Server 2025 for x64-based Systems (GDR). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0056
46th percentile
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2026-40370 | SQL Server | Remote Code Execution | 8.8 | 0.0056 | Exploitation Less Likely |
Showing 1 to 1 of 1
1