- Reaction score
- 1,936
Microsoft's May Patch Tuesday looked quiet. Since then, there's been an unpatched Exchange CVE, three Defender flaws, and a new BitLocker bypass.
While there weren’t any genuine zero-day vulnerabilities to patch in May’s Patch Tuesday update, the fallout since then has been severe.
The first attacks on Microsoft Exchange Server occurred as early as Patch Tuesday week, abusing a vulnerability that still hasn’t been fixed and continues to be exploited by hackers.
Meanwhile, Microsoft has released security updates for its Malware Protection Engine to fix critical flaws, backtracked on its design decision to store passwords as plaintext in Edge, and more. Plus, a security researcher released another proof-of-concept exploit, this time targeting a vulnerability in BitLocker security.
The next scheduled Patch Tuesday is June 9th, 2026.
www.pcworld.com
While there weren’t any genuine zero-day vulnerabilities to patch in May’s Patch Tuesday update, the fallout since then has been severe.
The first attacks on Microsoft Exchange Server occurred as early as Patch Tuesday week, abusing a vulnerability that still hasn’t been fixed and continues to be exploited by hackers.
Meanwhile, Microsoft has released security updates for its Malware Protection Engine to fix critical flaws, backtracked on its design decision to store passwords as plaintext in Edge, and more. Plus, a security researcher released another proof-of-concept exploit, this time targeting a vulnerability in BitLocker security.
The next scheduled Patch Tuesday is June 9th, 2026.
Microsoft patches several zero-day vulnerabilities with emergency updates
Microsoft's May Patch Tuesday looked quiet. Since then, there's been an unpatched Exchange CVE, three Defender flaws, and a new BitLocker bypass.


