Microsoft May 2026 Patch Tuesday, (Tue, May 12th)
2026-05-12T19:23:55Z•6be67a1351b635bcee19b5bff07b3ea6f46cdaf48a487b0bc403b45f760a1a8b
CVE-2026-31431applecaptchachromiumcloudflarecopy-faildirty-fragioslinuxlocal-privilege-escalationmacosmicrosoftmicrosoft-edgepatch-tuesdaysecurity-updatesyara
What happened
SANS ISC diary roundup (May 6–12, 2026): Microsoft’s May 2026 Patch Tuesday fixes 137 vulnerabilities and addresses 137 Chromium-related issues in Microsoft Edge. Apple released updates across iOS/iPadOS/macOS/tvOS/watchOS/visionOS fixing 84 vulnerabilities. A new Linux local privilege escalation dubbed “Dirty Frag” (related to the recently disclosed Copy Fail issue) was disclosed; the diary discusses its relationship to Copy Fail and mitigation/recommendation steps. Miscellaneous items include a YARA-X 1.16.0 release, discussion of Cloudflare Turnstile CAPTCHAs, and regular ISC Stormcast pod/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 6be67a1351b635bcee19b5bff07b3ea6f46cdaf48a487b0bc403b45f760a1a8b
- Enrichment time
- 2026-05-12T19:23:55Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.