For the complete documentation index, see /llms.txt. Markdown version of this page: /en/insights/series/patch-tuesday.md.

Insights

Patch Tuesday

Monthly analysis of Microsoft's security updates: what to patch first and why.

May 2026 ships 137 CVEs and no zero-days. Domain controllers go first for Netlogon and DNS Client RCEs, both CVSS 9.8 and unauthenticated.