Patch Tuesday, May 2026 Edition
Summary: Microsoft's May 2026 Patch Tuesday addressed at least 118 security vulnerabilities, 16 of them rated critical, and marked the first Patch Tuesday in nearly two years with no emergency zero-day fixes. The volume comes as vendors including Apple, Google, Mozilla and Oracle fix near-record numbers of bugs, with Mozilla's Firefox 150 resolving 271 vulnerabilities reportedly found during Anthropic's Project Glasswing evaluation and Google's Chrome fixing 127 flaws on May 8.
Bottom line: Microsoft fixed 167 flaws in April and 118 this month, while Oracle's latest quarterly update addressed at least 450 flaws including more than 300 remotely exploitable, unauthenticated ones - a patch load that strains any team's ability to test and deploy before attackers work from the same disclosures.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026