For May, Patch Tuesday means 139 updates - but no zero-days
Briefly

For May, Patch Tuesday means 139 updates - but no zero-days
"Microsoft this week released 139 updates affecting Windows, Office, .NET, and SQL Server (though there were no updates for Microsoft Exchange Server). Despite the absence of zero-days, the May Patch Tuesday update still requires Patch Now recommendations for Windows and Office."
"The combination of three unauthenticated network RCEs (Netlogon, DNS Client, and SSO Plugin for Jira and Confluence), four Word Preview Pane RCEs, the large TCP/IP vulnerability cluster, and the carry-over BitLocker recovery condition (still active on Windows 10 and Windows Server) warrants an accelerated deployment release schedule."
"The Readiness team suggests that testing start with internet-facing services, domain controllers, and Office endpoints. The May 2026 Assurance Security Dashboard breaks the cycle down by Microsoft product family for deployment risk assessment."
"KB5089549 for Windows 11 25H2 and 24H2 resolves the April PCR7/BitLocker recovery condition and improves Boot Manager servicing so subsequent boot file updates do not trigger recovery. Secure Boot certificate distribution adds a new C:\Windows\SecureBoot folder of automation scripts for IT teams rolling out the Windows UEFI CA 2023 key replacement under CVE-2023-24932, ahead of the 2011 certificate expirations happening between June and October 2026."
Microsoft released 139 updates affecting Windows, Office, .NET, and SQL Server, with no updates for Microsoft Exchange Server. The update set includes multiple unauthenticated network remote code execution issues, several Word Preview Pane remote code execution issues, a large TCP/IP vulnerability cluster, and a carry-over BitLocker recovery condition affecting Windows 10 and Windows Server. Even without zero-days, the May Patch Tuesday release still requires urgent deployment for Windows and Office. Testing is recommended to begin with internet-facing services, domain controllers, and Office endpoints. Known issues are reported as clean for several Windows versions, while two items require attention: a BitLocker recovery condition fix for Windows 11 25H2 and 24H2 and improvements to Boot Manager servicing, plus Secure Boot certificate distribution automation for UEFI CA key replacement and SSDP notification reliability improvements.
#patch-tuesday #windows-security #office-vulnerabilities #remote-code-execution #bitlocker
Read at Computerworld
Unable to calculate read time
[
|
]