High Threat Security Alert (A26-05-41): Multiple Vulnerabilities in Microsoft Products

Description:

Microsoft has released security updates to address multiple vulnerabilities in several Microsoft products or components. The list of security updates can be found at:
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#may-21st-2026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23652
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23663
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41090
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41104
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42827
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42901
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659

Reports indicated that the remote code execution vulnerability (CVE-2026-45659) is being exploited in the wild. Users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• Microsoft Edge prior to version 148.0.3967.83
• Microsoft Edge for Android prior to version 148.0.3967.70
• Microsoft 365 Copilot
• Microsoft 365 Copilot for iOS
• Microsoft Entra ID
• Microsoft Planetary Computer Pro (GeoCatalog)
• Microsoft Power Pages
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019, Server Subscription Edition

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security restriction bypass, spoofing or tampering on an affected system.

Recommendation:

Patches for affected products are available from the Windows Update / Microsoft Update Catalog. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#may-21st-2026
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23652
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23663
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41090
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41104
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42827
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42901
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8520 (to CVE-2026-8522)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9110 (to CVE-2026-9124)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9126
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23652
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23663
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41090
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41104
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42827
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42901
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45659
• https://www.hkcert.org/security-bulletin/microsoft-monthly-security-update-may-2026