Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
KB5087420 is the May 2026 Patch Tuesday update for Windows 11 23H2 (Build 22631.7079). Fixes the RDP multi-monitor warning issue from KB5082052, includes Secure Boot cert targeting improvements, and addresses BitLocker recovery behavior.
KB5087058 patches CVE-2026-32177 and CVE-2026-35433 (both .NET Framework EoP) on Windows 11 23H2. May 2026 Patch Tuesday security update for .NET Framework 3.5 and 4.8.1. No known issues.
KB5090407 patches CVE-2026-40370 (CVSS 8.8 RCE via path manipulation) in SQL Server 2019 CU32. Build 15.0.4470.1. MSDASQL linked server queries with @provstr fail with Msg 7416 after installation.
Microsoft released KB5087420 on May 12, 2026, the May Patch Tuesday cumulative security update for Windows 11 23H2. Patches kernel vulnerabilities and includes the March/April preview fixes. Build 22631.7100.
Microsoft released KB5087539 on May 12, 2026, a security update for Windows Server 2025 that patches remote code execution, privilege escalation and information disclosure flaws across the kernel, Active Directory Domain Services and Remote Desktop Services. The update raises the OS build to 26100.32860 and applies to Standard and Datacenter editions in both Desktop Experience and Server Core.
Microsoft released KB5093447 on May 12, 2026, a security update for .NET 8.0 patching CVE-2026-26918 (BinaryFormatter RCE, CVSS 9.8), CVE-2026-26919 (ASP.NET Core DoS), and CVE-2026-26920 (info disclosure) across all platforms.
Microsoft released KB5089900 on May 12, 2026, a security update for SQL Server 2022 CU24 patching CVE-2026-0234 (privilege escalation), CVE-2026-0235 (SSAS RCE), CVE-2026-0236 (SSRS info disclosure), and CVE-2026-0237 (DoS).
Microsoft released KB5087538 on May 12, 2026 as the Patch Tuesday security update for Windows 10 Version 1809 and Windows Server 2019, raising the OS build to 17763.8755 and fixing privilege-escalation, remote code execution, information-disclosure, denial-of-service and authentication-bypass flaws across kernel drivers, networking, graphics and TCP/IP components.
Microsoft released KB5087545 for Windows Server 2022 on May 12, 2026, patching five critical vulnerabilities including an unauthenticated RDP remote code execution flaw (CVE-2026-0145, CVSS 9.8) and a Hyper-V guest-to-host escape. The cumulative update raises the OS build to 20348.5139 and carries several known post-install issues.
Microsoft released KB5089466, a restart-free security hotpatch for Windows 11 versions 24H2 and 25H2, on May 12, 2026. The update addresses multiple high-severity vulnerabilities across the Windows kernel, networking stack, authentication, drivers and services, raising builds to 26100.8390 and 26200.8390.
Microsoft released KB5002865 on May 12, 2026, patching three security vulnerabilities in Excel 2016: two remote code execution flaws (CVE-2026-40362, CVE-2026-40359) and an out-of-bounds read (CVE-2026-40360), all with CVSS 7.8.
Microsoft released KB5089549 on May 12, 2026, a cumulative security update for Windows 11 24H2 and 25H2 that patches three vulnerabilities — a kernel elevation of privilege, a DirectX graphics memory corruption, and a networking authentication bypass — while raising builds to 26100.8457 and 26200.8457.
Microsoft released KB5087537 on May 12, 2026, a security update for Windows 10 1607 and Windows Server 2016 addressing kernel EoP, RDP RCE, GDI flaws, MSMQ RCE, and Print Spooler vulnerabilities. Build 14393.9140.
KB5083631 is the April 2026 optional preview for Windows 11 24H2/25H2 (Builds 26200.8328/26100.8328). Features: Xbox Mode, Agents on Taskbar, haptic feedback, FAT32 2TB, driver policy hardening.
KB5091596 is a .NET 10.0.7 out-of-band security update patching CVE-2026-40372, a critical ASP.NET Core DataProtection HMAC bypass allowing authentication cookie forging and privilege escalation. Update immediately.
After installing Samsung's April 2026 security update, Galaxy users - mainly on the S25 Ultra and S24 - report Microsoft Teams, Outlook, OneDrive, and Authenticator repeatedly failing. Community and reporting trace the cause to a WebView regression, with workarounds available while a fix rolls out.
Microsoft released KB5091573 on April 19, 2026, an out-of-band security update for Windows 10 Version 1809 patching CVE-2026-28301 through CVE-2026-28304. The vulnerabilities have been actively exploited in the wild.
Microsoft released KB5091572, an out-of-band security update for Windows 10 Version 1607 and Windows Server 2016, patching CVE-2026-0847 through CVE-2026-0850 and updating systems to Build 14393.9062.
