Microsoft Patch Tuesday May 2026 – 120 Vulnerabilities Fixed, Including 29 Critical RCE Flaws

**Microsoft May 2026 Patch Tuesday:** Microsoft released fixes for 120 vulnerabilities across Windows, Office, Azure and developer tools — including dozens of RCEs (many rated Critical) and numerous elevation-of-privilege and security-bypass flaws affecting high-value, network-exposed components such as Dynamics 365, Windows DNS Client, Netlogon, SharePoint, Office/Word, GDI/Win32k graphics, Native Wi‑Fi drivers, and Hyper‑V; organizations are advised to prioritize internet-facing and high-value services, virtualized workloads, and AI/cloud-connected tooling when deploying updates.