Story perspectives

Microsoft Patches 137 Vulnerabilities, 30 Critical, AI-Aided

5/13/2026

Summary

Story summary

Microsoft released fixes for 137 CVEs on May 13, 2026, including 30 critical flaws.
Tom Gallagher, VP of engineering at Microsoft Security Response Center, said the release is unusually large.
Microsoft’s AI system MDASH identified 16 flaws and will enter private preview for select customers.
Notable CVEs include CVE-2026-41096 (9.8) Windows DNS Client RCE, CVE-2026-42898 (9.9) Dynamics 365 RCE, and CVE-2026-42826 (10.0) Azure DevOps, all already mitigated.

1 of 1

Story summary

Microsoft released fixes for 137 CVEs on May 13, 2026, including 30 critical flaws.
Tom Gallagher, VP of engineering at Microsoft Security Response Center, said the release is unusually large.
Microsoft’s AI system MDASH identified 16 flaws and will enter private preview for select customers.
Notable CVEs include CVE-2026-41096 (9.8) Windows DNS Client RCE, CVE-2026-42898 (9.9) Dynamics 365 RCE, and CVE-2026-42826 (10.0) Azure DevOps, all already mitigated.