So then, what is our biggest threat this month? Well, we do have 38 critically rated updates from Microsoft. CVE-2026-41103 is our highest rated critical update with a CVSS score of 9.1/7.9. The good thing about this elevation of privilege vulnerability is that it only affects the Confluence SAML SSO and JIRA SAML SSO plugins. So our highest rated threat doesn't affect a mainstream application like the OS or one of the products in the Office family.
Honestly, I don't have much to talk to you about this month since it is a light month for patches. One thing I do want to mention is something that happened a couple Sundays ago on May 3rd. I woke up to what should have been an easy Sunday morning and instantly began to panic along with my security team as we saw a flurry of alerts in our security detection software. I'm sure some of you may have received the same alerts related to "Certigent". Most PC's in our organization were being flagged for security threats. Imagine my surprise when a high sev malware incident alerted that "Certigent high-severity malware was detected" on almost all our endpoints! I'm happy to report that after a little bit of digging we were able to stand down as most reported this was a false flag. You can read more about the cause of the alerts here.
I'd also like to give some attention to our newsletter sponsor this month; Action1:
Vulnerability Digest from Action1
Join Action1 this Wednesday, May 13, for a live webinar covering the most critical Patch Tuesday updates and third-party vulnerabilities. Get actionable recommendations on which patches to prioritize first, plus practical tips for securing all your endpoints in less than 24 hours.
Register now to reserve your spot.
Happy patching!
|
|
So, without further ado, here’s the chart of MS patches that affect Windows platforms in the past month.
|
Patch data provided by: |
|
||||
|
Technology |
Products Affected |
Severity |
Reference |
Workaround/ Exploited / Publicly Disclosed |
Vulnerability Info |
|
Windows |
Windows 10, 11 Server 2012, 2012 R2, 2016, 2019, 2022, 2025 including Server Core Installations |
Critical |
CVE-2026-21530 |
Workaround: No Exploited: No Public: No |
Denial of Service |
|
Edge |
Edge (Chromium-based) |
Critical |
CVE-2026-33111 |
Workaround: No |
Elevation of Privilege Information Disclosure Spoofing |
|
Office |
365 Apps for Enterprise |
Critical |
CVE-2026-32185 |
Workaround: No Exploited: No Public: No |
Elevation of Privilege |
|
SharePoint |
Enterprise Server 2016 |
Critical |
CVE-2026-33110 |
Workaround: No Exploited: No Public: No |
Remote Code Execution |
|
Azure |
AI Foundry |
Critical |
CVE-2026-21515 |
Workaround: No |
Elevation of Privilege Remote Code Execution Security Feature Bypass Spoofing |
|
Developer Tools |
.NET 10, 9 and 8 installed on Linux, MacOS and Windows |
Critical |
CVE-2026-32175 |
Workaround: No |
Denial of Service Elevation of Privilege Information Disclosure Remote Code Execution Security Feature Bypass Tampering |
|
SQL Server |
2016 SP3 GDR and Azure Connect Feature Pack |
Important |
Workaround: No Exploited: No Public: No |
Remote Code Execution |
|
|
Dynamics |
365 Customer Insights |
Critical |
CVE-2026-32172 |
Workaround: No Exploited: No Public: No |
Elevation of Privilege |
|
Apps |
365 CoPilot also for Android, Desktop |
Critical |
CVE-2026-26129 |
Workaround: No Exploited: No Public: No |
Elevation of Privilege |
Thanks as always for reading and best wishes on security,
Randy Franklin Smith
Ultimate Windows Security is a division of Monterey Technology Group, Inc. ©2006-2026 Monterey Technology Group, All rights reserved. You may forward this email in its entirety but all other rights reserved.
1162 Manus Chapel Road, Mill Springs, NC 28756
Note: We do our best to provide quality information and expert commentary but use all information at your own risk.