Security Alert (A26-05-41): Multiple Vulnerabilities in Microsoft Products


 

Published on: 22 May 2026

Description:

Microsoft has released security updates to address multiple vulnerabilities in several Microsoft products or components. The list of security updates can be found at:
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#may-21st-2026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23652
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23663
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41090
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41104
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42827
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42901
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659

 

Affected Systems:

  • Microsoft Edge prior to version 148.0.3967.83
  • Microsoft Edge for Android prior to version 148.0.3967.70
  • Microsoft 365 Copilot
  • Microsoft 365 Copilot for iOS
  • Microsoft Entra ID
  • Microsoft Planetary Computer Pro (GeoCatalog)
  • Microsoft Power Pages
  • Microsoft SharePoint Enterprise Server 2016
  • Microsoft SharePoint Server 2019, Server Subscription Edition

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

 

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security restriction bypass, spoofing or tampering on an affected system.

 

Recommendation:

Patches for affected products are available from the Windows Update / Microsoft Update Catalog. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#may-21st-2026
  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23652
  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23663
  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41090
  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41104
  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42827
  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42901
  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8520 (to CVE-2026-8522)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9110 (to CVE-2026-9124)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9126
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23652
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23663
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41090
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41104
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42827
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42901
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45659


Tag: Microsoft , Edge , Microsoft 365 Copilot , Microsoft Entra ID , Microsoft Planetary Computer Pro , Power Pages , SharePoint
Tags