Patch Tuesday 2026
The latest Patch Tuesday 2026 coverage — news, analysis, and updates from the WindowsNews.AI desk.
Patch now: Windows 11 and Server 2025 crash risk from single TCP/IP packet
Microsoft’s May 2026 Patch Tuesday brought a fix for a critical denial-of-service vulnerability in the Windows TCP/IP stack that could allow unauthenticated attackers to crash affected systems with...
Patch Now: CVE-2026-40399 Windows TCP/IP Flaw Grants SYSTEM Access
Microsoft’s May 2026 Patch Tuesday release includes a fix for CVE-2026-40399, a local elevation-of-privilege vulnerability in the Windows TCP/IP stack rated Important with a CVSS 3.1 score of 7.8....
CVE-2026-40380: Critical Windows Volume Manager RCE Vulnerability Patched in May 2026 Update
Microsoft shipped a critical security fix for CVE-2026-40380 in its May 2026 Patch Tuesday release, closing a remote code execution vulnerability in the Windows Volume Manager Extension Driver. The...
CVE-2026-40360: Microsoft Excel Information Disclosure Vulnerability Patched – Enterprise Checklist for May 2026 Patch Tuesday
Microsoft’s May 2026 Patch Tuesday rollout includes a fix for CVE-2026-40360, an information disclosure vulnerability in Microsoft Excel that could allow remote attackers to read sensitive data...
CVE-2026-35433 .NET Elevation of Privilege: What You Need to Know About the May 2026 Patch
Microsoft has officially disclosed a new elevation-of-privilege (EoP) vulnerability in the .NET framework, tracked as CVE-2026-35433, as part of its May 2026 Security Updates. The advisory, published...
Windows IKE Flaw Lets One Packet Crash VPN Servers—Patch Now
Microsoft's May 2026 Patch Tuesday release addresses a serious denial-of-service vulnerability in the Windows Internet Key Exchange (IKE) protocol, tracked as CVE-2026-35424. Disclosed on May 12,...
CVE-2026-35420 Under Active Attack: Patch Windows Kernel EoP Now
Microsoft's May 2026 Patch Tuesday cycle delivered a critical fix for CVE-2026-35420, a Windows Kernel elevation-of-privilege vulnerability with confirmed active exploitation. The flaw allows an...
CVE-2026-34351: Why This Windows TCP/IP Vulnerability Demands Your Immediate Attention
Microsoft on May 12, 2026, disclosed CVE-2026-34351, an elevation-of-privilege vulnerability in the Windows TCP/IP stack that allows a local attacker to gain SYSTEM-level access. The flaw, rated...
CVE-2026-34329: Microsoft Patches Important-Rated MSMQ Remote Code Execution Flaw Exploitable via Adjacent Attack
Microsoft's May 2026 Patch Tuesday landed with a stark reminder that legacy Windows components remain a fertile hunting ground for attackers. The company disclosed CVE-2026-34329, an Important-rated...
KB5087594 Safe OS Update Prevents Windows 11 Secure Boot Failure by June 2026
Microsoft published KB5087594 on May 12, 2026, as a Safe OS Dynamic Update exclusively for Windows 11 version 23H2. This release is not just another routine patch—it is a direct response to the...
KB5089548: May 2026 Patch Tuesday Ships AI Updates, Fixes 2 Zero-Days
Microsoft pushed the May 2026 Patch Tuesday update KB5089548 to Windows 11 version 26H1 on May 12, moving the operating system to build 28000.2113. This cumulative update bundles critical security...
Windows Kernel Bug Allows Attackers to Vault Out of Sandboxes — Patch Now, Microsoft Says
Microsoft’s May 2026 Patch Tuesday release fixes a kernel flaw that can pry open the containment barriers meant to keep untrusted code caged. CVE-2026-33841, a heap-based buffer overflow in the...