Jack Bicer

Microsoft released fixes for 137 CVEs, including 30 critical flaws, with 14 earning a 9.0 or higher CVSS severity rating. The company's AI bug hunting system, MDASH, found 16 of the vulnerabilities addressed in this month's release. Microsoft admins are expected to face a lot more work in applying and testing the patches.

Microsoft addressed 137 vulnerabilities in its May Patch Tuesday update, including 13 rated critical, with no actively exploited zero-days reported. The vulnerabilities affect various Microsoft products and components, such as Azure and Microsoft Dynamics 365. Researchers attribute the high volume of vulnerabilities to the growing use of artificial intelligence models in finding previously uncovered defects.

Microsoft released its second-largest monthly batch of security patches, addressing 165 vulnerabilities, including a zero-day flaw in SharePoint actively exploited in the wild. The update highlighted a surge in AI-discovered vulnerabilities and included high-severity flaws in Microsoft Defender and Windows IKE Extension.