Microsoft fixes 118 vulnerabilities in May Patch Tuesday

Microsoft has released software updates today to address at least 118 vulnerabilities in its Windows operating systems and other products. This represents a significant drop from the 167 defects corrected in April, but it remains a high number of patches to apply. A notable feature of this Patch Tuesday is the absence of fixes for actively exploited zero-days, a phenomenon not seen in nearly two years.

Critical vulnerabilities and immediate risks

Among the identified vulnerabilities, 16 have received Microsoft's "critical" label, indicating that they could be exploited to gain remote control of vulnerable devices with minimal user interaction. Rapid7 highlighted some of the most concerning weaknesses, including:

  • CVE-2026-41089: A stack-based buffer overflow in Windows Netlogon that allows attackers to gain SYSTEM privileges on the domain controller. No privileges or user interaction are required, and the attack complexity is low. Patches are available for all versions of Windows Server from 2012 onwards.
  • CVE-2026-41096: A remote code execution (RCE) in the Windows DNS client implementation, although Microsoft believes exploitation is less likely.
  • CVE-2026-41103: A privilege escalation vulnerability that allows unauthorized attackers to impersonate an existing user by presenting forged credentials, bypassing Entra ID. Microsoft expects exploitation is more likely.

The impact of Project Glasswing on vulnerability identification

Microsoft, along with other tech giants like Apple, Google, Mozilla, and Oracle, has had access to "Project Glasswing," an AI capability developed by Anthropic that has proven effective in finding vulnerabilities in code. This project has accelerated the discovery of security defects, leading to an increased pace of patching.

Apple, for example, typically corrects around 20 vulnerabilities per security update for iOS devices. On May 11, Apple released updates to address at least 52 vulnerabilities, extending the fixes to the iPhone 6s and iOS 15.

Accelerated updates for Mozilla and Oracle

Mozilla has recently adopted a more aggressive pace for security updates, releasing weekly patches after the release of Firefox 150, which resolved 271 vulnerabilities discovered during the Glasswing assessment. Oracle, on the other hand, has increased its patch cycle in response to working with Glasswing, addressing at least 450 defects in its latest quarterly update, including more than 300 fixes for remotely exploitable and unauthenticated vulnerabilities. Oracle announced it will move to a monthly update cycle for critical security issues.

Google Chrome and the need for restart

On May 8, Google began distributing updates for its Chrome browser that corrected an impressive number of 127 security vulnerabilities. This represents a significant increase from the 30 defects corrected the previous month. It is important to note that Chrome automatically downloads available security updates, but installation requires a full browser restart.

Implications for users and security tips

If issues arise during the application of updates from Microsoft or other providers, it is advisable to report the event. Additionally, before updating, it is always a good practice to back up data and the hard drive. For a more detailed analysis of the updates released by Microsoft today, you can consult the inventory of the SANS Internet Storm Center.

The importance of data backup

Before applying any update, it is essential to back up data. This preventive step can protect against any issues that may arise during the update process, ensuring that important data is not lost.

The role of artificial intelligence in vulnerability discovery

The use of artificial intelligence platforms like Project Glasswing has proven effective in finding vulnerabilities in human code. This innovative approach has allowed the identification of a record number of security defects, accelerating the correction process and improving overall software security.

The May Patch Tuesday saw a significant number of vulnerabilities corrected by Microsoft and other tech giants. The use of artificial intelligence to identify these defects has accelerated the correction process, improving software security. Users are encouraged to apply updates as soon as possible and follow best security practices to protect their devices.

The impact of Project Glasswing on the cybersecurity landscape

The phenomenon observed in May 2026, with the significant increase in corrected vulnerabilities thanks to Project Glasswing, represents a turning point in the cybersecurity sector. Artificial intelligence has proven to be a powerful tool for identifying code defects that might escape human eyes, but this capability is not without criticism.

Advantages and limitations of AI in security

The AI-based approach offers undeniable benefits: speed of analysis, ability to process large amounts of code, and identification of complex patterns. However, as highlighted in the original source, even artificial intelligence platforms can be susceptible to social engineering techniques, demonstrating that cybersecurity remains a field where the human and algorithmic approaches must integrate.

Another critical aspect is the management of zero-day vulnerabilities. Although the May 2026 Patch Tuesday did not include fixes for actively exploited zero-days, recent history shows that these defects represent a persistent threat. The adoption of more frequent update cycles, such as Mozilla's, could reduce the period of exposure to these vulnerabilities.

The evolution of update strategies

Oracle's decision to move to a monthly update cycle for critical issues reflects a broader trend towards greater agility in managing vulnerabilities. This approach, combined with the use of AI tools like Glasswing, could become the industry standard in the coming years.

However, the increased frequency of updates poses new challenges for end users. The need to fully restart the Chrome browser after each update, for example, could be an obstacle for those who are not technically savvy. This underscores the importance of intuitive update management tools and user awareness campaigns.

Implications for the future of cybersecurity

The case of Project Glasswing raises fundamental questions about the future of cybersecurity. If AI can identify vulnerabilities more quickly, what prevents attackers from using the same tools to discover defects in defensive systems? This creates an arms race where both sides seek to maintain a technological advantage.

Another aspect to consider is the economic impact. The increase in the number of identified and corrected vulnerabilities could entail significant costs for companies, both in terms of development and implementation of updates. This could lead to a divergence between large tech companies, which can afford to adopt these technologies, and small and medium-sized enterprises.

The May 2026 Patch Tuesday demonstrated the transformative potential of AI in vulnerability discovery, but also the complexities and challenges that this technology introduces. As we continue to see an increase in the number of defects identified and corrected, it is essential that the sector adopts a holistic approach that integrates automated tools, human skills, and effective update management strategies.

For end users, the key lesson remains the same: keep systems updated, perform regular backups, and stay informed about best security practices. Only through collective commitment can we hope to address the increasingly complex challenges of the cybersecurity landscape.

Editorial Note and Disclaimer

The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.

GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not perform real-time information activities.

The GoYou project does not provide professional, technical, legal, or financial advice and disclaims any liability for the misuse of the information published.

In the Crypto sector, every investment involves risks: readers are invited to always inform themselves independently before making any decision.