Microsoft Server security updates, May 2026 (Patch Tuesday 2026-05-12)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in May 2026, including the Patch Tuesday release on 2026-05-12 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 60
Critical: 3
High: 47
In CISA KEV: 2
CVEs: 60

Microsoft server CVEs, May 2026

May 22, 2026
High [CVE-2026-45659] Microsoft SharePoint Remote Code Execution Vulnerability
High8.8ExploitedCISA KEV
May 22, 2026
High [CVE-2026-26147] Azure Stack HCI Information Disclosure Vulnerability
High7.7
May 19, 2026
Medium [CVE-2026-45585] Windows BitLocker Security Feature Bypass Vulnerability
Medium6.8PoC reported
May 14, 2026
High [CVE-2026-42897] Microsoft Exchange Server Spoofing Vulnerability
High8.1ExploitedCISA KEV
May 12, 2026
Critical [CVE-2026-40402] Windows Hyper-V Elevation of Privilege Vulnerability
Critical9.3
May 12, 2026
Critical [CVE-2026-41096] Windows DNS Client Remote Code Execution Vulnerability
Critical9.8
May 12, 2026
Critical [CVE-2026-41089] Windows Netlogon Remote Code Execution Vulnerability
Critical9.8
May 12, 2026
High [CVE-2026-40413] Windows TCP/IP Denial of Service Vulnerability
High7.4
May 12, 2026
High [CVE-2026-40403] Windows Graphics Component Remote Code Execution Vulnerability
High8.8
May 12, 2026
High [CVE-2026-40398] Windows Remote Desktop Services Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-40397] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-40382] Windows Telephony Service Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-40369] Windows Kernel Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-40370] SQL Server Remote Code Execution Vulnerability
High8.8
May 12, 2026
High [CVE-2026-40367] Microsoft Word Remote Code Execution Vulnerability
High8.4
May 12, 2026
High [CVE-2026-40365] Microsoft SharePoint Server Remote Code Execution Vulnerability
High8.8
May 12, 2026
High [CVE-2026-34341] Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-34340] Windows Projected File System Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-34337] Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-34336] Windows DWM Core Library Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-34334] Windows TCP/IP Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-34332] Windows Kernel-Mode Driver Remote Code Execution Vulnerability
High8.0
May 12, 2026
High [CVE-2026-33838] Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-33837] Windows TCP/IP Local Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-42896] Windows DWM Core Library Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-32161] Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
High7.5
May 12, 2026
High [CVE-2026-41095] Data Deduplication Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-41088] Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-40415] Windows TCP/IP Remote Code Execution Vulnerability
High8.1
May 12, 2026
High [CVE-2026-40410] Windows SMB Client Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-40408] Windows WAN ARP Driver Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-40406] Windows TCP/IP Information Disclosure Vulnerability
High7.5
May 12, 2026
High [CVE-2026-40405] Windows TCP/IP Denial of Service Vulnerability
High7.5
May 12, 2026
High [CVE-2026-40399] Windows TCP/IP Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-40377] Microsoft Cryptographic Services Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-35424] Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
High7.5
May 12, 2026
High [CVE-2026-35421] Windows GDI Remote Code Execution Vulnerability
High7.8
May 12, 2026
High [CVE-2026-35420] Windows Kernel Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-35417] Windows Win32k Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-35416] Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-35415] Windows Storage Spaces Controller Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-34347] Windows Win32k Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-34345] Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-34343] Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-34342] Windows Print Spooler Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-34331] Win32k Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-34329] Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
High8.8
May 12, 2026
High [CVE-2026-33841] Windows Kernel Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-33840] Win32k Elevation of Privilege Vulnerability
High7.8
May 12, 2026
High [CVE-2026-33839] Win32k Elevation of Privilege Vulnerability
High7.0
May 12, 2026
High [CVE-2026-33834] Windows Event Logging Service Elevation of Privilege Vulnerability
High7.8
May 12, 2026
Medium [CVE-2026-41097] Secure Boot Security Feature Bypass Vulnerability
Medium6.7
May 12, 2026
Medium [CVE-2026-32209] Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
Medium4.4
May 12, 2026
Medium [CVE-2026-34339] Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Medium5.5
May 12, 2026
Medium [CVE-2026-32170] Windows Rich Text Edit Elevation of Privilege Vulnerability
Medium6.7
May 12, 2026
Medium [CVE-2026-40380] Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Medium6.2
May 12, 2026
Medium [CVE-2026-35423] Windows 11 Telnet Client Information Disclosure Vulnerability
Medium5.4
May 12, 2026
Medium [CVE-2026-35422] Windows TCP/IP Driver Security Feature Bypass Vulnerability
Medium6.5
May 12, 2026
Medium [CVE-2026-35419] Windows DWM Core Library Information Disclosure Vulnerability
Medium5.5
May 12, 2026
Medium [CVE-2026-34350] Windows Storport Miniport Driver Denial of Service Vulnerability
Medium6.5

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.