Microsoft's May Patch Tuesday addresses 120 vulnerabilities and contains no zero-days — the first such month since June 2024. Among the Critical fixes are three RCEs at CVSS 9.8 or higher: Netlogon, Windows DNS Client, and Microsoft Dynamics 365. The Secure Boot certificate deadline is 45 days out.
Microsoft's April Patch Tuesday addresses 163 vulnerabilities — the second-largest monthly release in company history — including an actively exploited SharePoint spoofing zero-day, a publicly disclosed Defender privilege escalation linked to the BlueHammer proof-of-concept, and a wormable TCP/IP RCE. The Secure Boot certificate cliff is 73 days out.
Microsoft's quietest Patch Tuesday in six months addresses 83 vulnerabilities with no active exploits — but a critical Excel flaw that weaponizes Copilot for zero-click data theft deserves attention.
Microsoft's February Patch Tuesday addresses 58 vulnerabilities including six actively exploited zero-days — an unusually high exploitation rate — plus three remote code execution flaws in GitHub Copilot that should worry every developer.
Microsoft's first Patch Tuesday of 2026 addresses 114 vulnerabilities including three zero-days, but also introduces a frustrating shutdown bug affecting Windows 11 systems with Secure Launch enabled.