May 13, 2026 13:35:00

Today is the monthly 'Windows Update' day, with 120 vulnerabilities fixed and extended security updates for both Windows 11 and Windows 10.

The monthly Windows Update, which delivers security updates and bug fixes for Windows, has been released. The update released on May 13, 2026 (Japan time) includes eight updates rated as 'critical' and four updates rated as 'important'.

Security updates for May 2026 (monthly)
https://www.microsoft.com/en-us/msrc/blog/2026/05/202605-security-update

Microsoft has released its May 2026 monthly security updates. These updates will be automatically applied by default. For organizations managing updates, we have published an overview on our blog. Please refer to it and deploy the updates as soon as possible. https://t.co/BYRm7B308V #security #updates #microsoft pic.twitter.com/weBuvYDLyy

— Microsoft Security Team (@JSECTEAM) May 12, 2026

Microsoft releases Windows 10 KB5087544 extended security update
https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5087544-extended-security-update/

Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days
https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2026-patch-tuesday-fixes-120-flaws-no-zero-days/

The following is a list of security updates for May 2026.

Target products	maximum severity	The biggest impact	Related support articles or support web pages
Windows 11 v26H1, v25H2, v24H2, v23H2	emergency	Remote code execution is possible.	v26H1 5089548 v25H2, v24H2 5089549 v25H2, v24H2 Hotpatch 5089466 v23H2 5087420
Windows Server 2025 (including Server Core installation)	emergency	Remote code execution is possible.	5087539 Hotpatch 5087423
Windows Server 2022, 23H2 (including Server Core installation)	emergency	Remote code execution is possible.	Windows Server 2022 5087545 Windows Server 2022 Hotpatch 5087424 Windows Server 23H2 5087541
Windows Server 2019, 2016 (including Server Core installation)	emergency	Remote code execution is possible.	Windows Server 2019 5087538 Windows Server 2016 5087537
Windows Admin Center	important	Elevation of privileges	https://learn.microsoft.com/windows-server/manage/windows-admin-center/overview
Microsoft Office	emergency	Remote code execution is possible.	https://learn.microsoft.com/officeupdates
Microsoft SharePoint	emergency	Remote code execution is possible.	https://learn.microsoft.com/officeupdates/sharepoint-updates
Microsoft .NET	important	Elevation of privileges	https://learn.microsoft.com/dotnet
Microsoft Visual Studio	important	Remote code execution is possible.	https://learn.microsoft.com/visualstudio
Microsoft Dynamics 365	emergency	Elevation of privileges	https://learn.microsoft.com/dynamics365
Microsoft SQL Server	important	Remote code execution is possible.	https://learn.microsoft.com/sql
Microsoft Azure	emergency	Elevation of privileges	https://learn.microsoft.com/azure

This security update includes security patches for 120 vulnerabilities discovered over the past few months. While no zero-day vulnerabilities have been publicly disclosed, there are fixes that IT administrators and security personnel should be aware of, including vulnerabilities in Microsoft Office Word and Excel that could lead to remote code execution.

Furthermore, after the security update, an Xbox Mode will be added, allowing users to experience an Xbox console-like interface on their Windows PC. Other improvements include fixes for taskbar issues and enhanced reliability of Windows Hello.

Microsoft has already stopped providing new features for Windows 10, but this month they released an extended security update for Windows 10, 'KB5087544'. The fixes included in KB5087544 reportedly address issues such as security warnings not displaying correctly in Remote Desktop, as well as improvements to Secure Boot.

Windows Update is released on the second Tuesday of every month in US time, and the next update is scheduled for release on Wednesday, June 10, 2026, Japan time.