Microsoft May 2026 Security Updates

 

The Microsoft May 2026 security updates have been released and consist of 132 new CVEs to Microsoft products and 128 non-Microsoft CVEs for Chromium. 

Of the Microsoft CVEs released, 30 are rated Critical, 3 are rated Moderate and the rest are rated Low in severity. At the time of release, none are listed as publicly known or as being actively exploited.

The security updates apply to the following products, features and roles: Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, Copilot Chat, Github Copilot, M365 Copilot, SQL Server, TCP/IP, and the Telnet Client.

Information regarding known issues with KBs included in the security updates can be found at the bottom of the page at May 2026 Security Updates - Release Notes - Security Update Guide - Microsoft.

Recommended Reading:  See Dustin Childs complete review and analysis in Zero Day Initiative -- The May 2026 Security Update Review.

Additional Update Notes:

• Windows 10 -- See Windows 10 Extended Security Updates (ESU).
• Servicing Stack Updates -- Microsoft now combines the latest servicing stack update (SSU) for your operating system with the Latest Cumulative Updates (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
  
• Windows updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows, in addition to non-security updates. The updates are also available via search for the KB number in the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 11 operating systems, please see Windows 11 Home and Pro.
• Windows Update History:  Windows 11, Windows 10

 

References

• Security Update FAQ
• Security Updates Guide

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 150.0.3 Released with Security Updates

 Mozilla sent Firefox Version 150.0.3 to the release channel. 

The update includes four security updates, all which are rated critical. The security updates can be reviewed here.

One fix is included in the update which fixed an issue where characters entered into password fields could appear unmasked in print preview and printed pages (Release Notes).

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 150.0.2 Released with Security Updates

 Mozilla sent Firefox Version 150.0.2 to the release channel. 

The update includes three security updates of which all are rated critical. The security updates can be reviewed here.

Numerous fixes are included in the update.  To review the fixes, see the Release Notes.

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Pale Moon Version 34.2.2 Released with Security Updates

  Pale Moon has been updated to version 34.2.2.  This is a stability and security update. 

Changes/fixes:

• Fixed a regression in 34.2.1 that would cause crashes to desktop when using certain extensions or visiting certain websites.
• Fixed potential security issues with audio channel mixing, MP3 decoding (DiD), international text display, DOM workers (DiD), reading of files (DiD), and the ANGLE graphics library.

Notes:

*DiD: This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes
Release Cycle

Remember - "A day without laughter is a day wasted."

April 2026 Non-Security Preview Update for Windows 11

  Microsoft released KB508363631 (OS Builds 26200.8328 and 26100.8328) for Windows 11 versions 25H2 and 24H2. 

In addition, KB5083806 (OS Build 28000.1896) was released for Windows 11 Version 26H1.

See the referenced KB Articles for information about any quality improvements, new features and the highlights included in the updates.

Update:  To get the update, go to Settings > Update & Security > Windows Update. The link to download the update can be found in the Optional updates available section.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 150.0.1 Released with Security Updates

 Mozilla sent Firefox Version 150.0.1 to the release channel. 

The update includes four security updates of which one (1) is rated critical and three (3) are rated high.  The security updates can be reviewed here.

Five fixes are included in the update.  To review the fixes, see the Release Notes.

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Pale Moon Version 34.2.1 Released with Security Updates

  Pale Moon has been updated to version 34.2.1.  This is a bugfix and security update. 

A large audit of security issues was performed. Many security issues were addressed, including potential crash scenarios and code correctness issues.

As a summary: 50 potential vulnerabilities were found applicable and fixed, 20 issues had DiD* code changes applied, and 4 were already mitigated before being reported.

Of the reported vulnerabilities, 270 were not applicable to Pale Moon code (with the vast majority pertaining to e10s/multi-process browser architecture) and 6 low-impact ones were marked for further investigation at a later time.

Notes:

For FreeBSD users: the binaries from this version forward require FreeBSD v14 or later.

*DiD: This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes
Release Cycle

Remember - "A day without laughter is a day wasted."

Mozilla Firefox Version 150.0 Released with Security Updates

 Mozilla sent Firefox Version 150.0 to the release channel. 

The update includes forty-one security updates of which twelve (12) are rated critical, eighteen (18) are rated moderate, and eleven (11) are rated low. The security updates can be reviewed here.

New features and fixes are included in the update.  To review the new features and fixes, see the Release Notes.

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Microsoft April 2026 Security Updates

 

The Microsoft April 2026 security updates have been released and consist of 163 new CVEs to Microsoft products and 84 non-Microsoft CVEs, including Chromium. 

Of the Microsoft CVEs released, 8 are rated Critical and the rest are rated Important in severity. At the time of release, one is listed as publicly known and one as being actively exploited.

The security updates apply to the following products, features and roles: Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, .NET and Visual Studio, SQL Server, Hyper-V Server, BitLocker, and the Windows Wallet Service.

Information regarding known issues with KBs included in the security updates can be found at the bottom of the page at April 2026 Security Updates - Release Notes - Security Update Guide - Microsoft.

Recommended Reading:  See Dustin Childs complete review and analysis in Zero Day Initiative -- The April 2026 Security Update Review.

Additional Update Notes:

• Windows 10 -- See Windows 10 Extended Security Updates (ESU).
• Servicing Stack Updates -- Microsoft now combines the latest servicing stack update (SSU) for your operating system with the Latest Cumulative Updates (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
  
• Windows updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows, in addition to non-security updates. The updates are also available via search for the KB number in the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 11 operating systems, please see Windows 11 Home and Pro.
• Windows Update History:  Windows 11, Windows 10

 

References

• Security Update FAQ
• Security Updates Guide

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 149.0.2 Released with Security Updates

 Mozilla sent Firefox Version 149.0.2 to the release channel. 

The update includes five security updates all of which are rated critical. The security updates can be reviewed here.

The update has a number of fixes.  To review the fixes, see the Release Notes.

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Pale Moon Version 34.2.0 Released with Security Updates

  Pale Moon has been updated to version 34.2.0. This is a development, bugfix and security update.

The update includes new features and numerous changes/fixes. The update also addresses security issues: CVE-2026-4707 (DiD), CVE-2026-4690 (DiD), CVE-2026-4727 (DiD), and others without a CVE designation. A note that Mozilla-relevant security issues CVE-2025-59375 and CVE-2026-4726 had already been addressed in the browser before this release.

*DiD: This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Note: This release as well as the preceding release is having a problem loading the Yahoo.com home page (forum discussion).

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Note: This release as well as the preceding release is having a problem loading the Yahoo.com home page (forum discussion). 

Release Notes
Release Cycle

Remember - "A day without laughter is a day wasted."

Happy Easter! "Khrystos Voskres!"

 

"Khrystos Voskres!"
(Christ is Risen!)

"Voistyno Voskres!"
(He is Truly Risen!)

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

March 2026 Non-Security Preview Update for Windows 11

  Microsoft released KB5079391 (OS Builds 26200.8116 and 26100.8116) for Windows 11 versions 25H2 and 24H2. 

In addition, KB5079489 (OS Build 28000.1764) was released for Windows 11 Version 26H1.

See the referenced KB Articles for information about any quality improvements, new features and the highlights included in the updates.

Update:  To get the update, go to Settings > Update & Security > Windows Update. The link to download the update can be found in the Optional updates available section.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 149.0 Released with Security Updates

 Mozilla sent Firefox Version 149.0 to the release channel. 

The update includes forty-six security updates of which nineteen (19) are rated critical, twenty-one (21) are rated moderate, and six (6) are rated low. The security updates can be reviewed here.

This is a major update with new features, fixes, and changes included in the update.  To review the new features, changes, and fixes, see the Release Notes.

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Microsoft March 2026 Security Updates

 

The Microsoft March 2026 security updates have been released and consist of 84 new CVEs to Microsoft products. In addition, there is 1 third-party and 9 chromium CVEs included.

Of the Microsoft CVEs released, 8 are rated Critical and the rest are rated Important in severity. At the time of release, two are listed as publicly known but none as being actively exploited.

The security updates apply to the following products, features and roles: Windows and Windows components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, SQL Server, Hyper-V Server, and the Windows Resilient File System (ReFS). 

Information regarding known issues with KBs included in the security updates can be found at the bottom of the page at March 2026 Security Updates - Release Notes - Security Update Guide - Microsoft.

Recommended Reading:  See Dustin Childs complete review and analysis in Zero Day Initiative -- The March 2026 Security Update Review.

Additional Update Notes:

• Windows 10 -- See Windows 10 Extended Security Updates (ESU).
• Servicing Stack Updates -- Microsoft now combines the latest servicing stack update (SSU) for your operating system with the Latest Cumulative Updates (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
  
• Windows updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows, in addition to non-security updates. The updates are also available via search for the KB number in the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 11 operating systems, please see Windows 11 Home and Pro.
• Windows Update History:  Windows 11, Windows 10

 

References

• Security Update FAQ
• Security Updates Guide

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 148.0.2 Released with Security Updates

 Mozilla sent Firefox Version 148.0.2 to the release channel. 

The update includes three security updates rated critical. The security updates can be reviewed here.

A number of fixes are included in the update.  To review the fixes, see the Release Notes.

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Pale Moon Version 34.1.0 Released with Security Updates

  Pale Moon has been updated to version 34.1.0.  This is an important update landing technological enhancements previously intended to be in the v34.0 milestone.  

The update also addresses security issues:  CVE-2026-2806 (DiD), CVE-2026-2758, CVE-2026-2804, CVE-2026-2787 (DiD), CVE-2026-2757, CVE-2026-2773, CVE-2026-2779 (DiD), CVE-2026-2775, and several others that do not have a CVE designation.

*DiD: This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes
Release Cycle

Remember - "A day without laughter is a day wasted."

February 2026 Non-Security Preview Update for Windows 11

  Microsoft released KB5077241 (OS Builds 26200.7922 and 26100.7922) for Windows 11 versions 25H2 and 24H2. In addition, KB5077239 (OS Build 28000.1643) was released for Windows 11 Version 26H1.

See the referenced KB Articles for information about any quality improvements, new features and the highlights included in the updates.

Update:  To get the update, go to Settings > Update & Security > Windows Update. The link to download the update can be found in the Optional updates available section.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 148.0 Released with Security Updates

 Mozilla sent Firefox Version 148.0 to the release channel. 

The update includes fifty-one security updates of which thirty-one (31) are rated critical, seventeen (17) are rated moderate, and three (3) are rated low. The security updates can be reviewed here.

New features and fixes are included in the update.  To review the new features and fixes, see the Release Notes.

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 147.0.4 Released with Security Update

 Mozilla sent Firefox Version 147.0.4 to the release channel. From what I have located, the latest ESR versions are 140.7 ESR and 115.32.0 ESR.

The update includes one (1) critical security update.

The update also includes a bug fix. To review the fixe, see the Release Notes.

Update:  To get the update now, select "Help" from the Firefox menu and pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  If you do not use the English language version, Fully Localized Versions are available for download.

Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Microsoft February 2026 Security Updates

 

The Microsoft February 2026 security updates have been released and consist of 112 new CVEs to Microsoft products.  In addition, there are 62 third-party and chromium CVEs.

Of the Microsoft CVEs released, 5 are rated Critical, 2 are rated Moderate and the rest are rated Important in severity. At the time of release, six are listed as being exploited of which three are publicly known.

The security updates apply to the following products, features and roles: Windows and Windows components, Office and Office Components, Azure, Microsoft Edge (Chromium-based), .NET and Visual Studio, GitHub Copilot, Mailslot FS, Exchange Server, Internet Explorer (!), Power BI, Hyper-V Server, and the Windows Subsystem for Linux.

Information regarding known issues with KBs included in the security updates can be found at the bottom of the page at February 2026 Security Updates - Release Notes - Security Update Guide - Microsoft.

Recommended Reading:  See Dustin Childs complete review and analysis in Zero Day Initiative -- The February 2026 Security Update Review.

Additional Update Notes:

• Windows 10 -- See Windows 10 Extended Security Updates (ESU).
• Servicing Stack Updates -- Microsoft now combines the latest servicing stack update (SSU) for your operating system with the Latest Cumulative Updates (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
  
• Windows updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows, in addition to non-security updates. The updates are also available via search for the KB number in the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 11 operating systems, please see Windows 11 Home and Pro.
• Windows Update History:  Windows 11, Windows 10

 

References

• Security Update FAQ
• Security Updates Guide

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...