WEEKLY BRIEFING · 11 MAY – 17 MAY 2026 · UTC
Public sources only
90 public updates in week 20
Microsoft published 12 Windows KB releases (12 security). MSRC published 128 new Microsoft CVEs, 18 critical, 1 already exploited in the wild. 31 roadmap changes, led by Purview (10) and Microsoft 365 Copilot (7). CISA added 1 Microsoft CVE to its Known Exploited Vulnerabilities catalog. 1 lifecycle milestone fall in the next 30 days. 1 Azure update. 8 Windows and security articles from Microsoft blogs.
12Windows KB releases
1MSRC release note
31Roadmap changes across 8 products
8Windows and security articles
128Microsoft CVEs published · 18 critical
1Microsoft CVEs added to CISA KEV
Security to act on1
Windows releases12
- Windows 10, version 1607 — KB5087537 (B), build 14393.914012 May
- Windows 10, version 1809 — KB5087538 (B), build 17763.875512 May
- Windows 10, version 21H2 — KB5087544 (B), build 19044.729112 May
- Windows 10, version 22H2 — KB5087544 (B), build 19045.729112 May
- Windows 11, version 23H2 — KB5087420 (B), build 22631.707912 May
7 more
- Windows 11, version 24H2 — KB5089549 (B), build 26100.845712 May
- Windows 11, version 25H2 — KB5089549 (B), build 26200.845712 May
- Windows 11, version 26H1 — KB5089548 (B), build 28000.211312 May
- Windows Server 2016 — KB5087537 (B), build 14393.914012 May
- Windows Server 2019 — KB5087538 (B), build 17763.875512 May
- Windows Server 2022 — KB5087545 (B), build 20348.513912 May
- Windows Server 2025 — KB5087539 (B), build 26100.3286012 May
MSRC security releases1
Windows and security news8
- Improving Windows quality: Making Taskbar and Start more personal15 May
- Announcing new builds for 15 May 202615 May
- Announcing new Release Preview builds for 14 May 202614 May
- Windows Office Hours: May 21, 202614 May
- VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702)14 May
Lifecycle milestones in the next 30 days1
- End of servicing: Microsoft Configuration Manager, Version 2409 6 Jun
Microsoft product news28
Microsoft Graph changelog · 17
- Security (beta): Added the microsoftSecurityForAI member to the serviceSource enumeration type for the alert resource.17 May
- Teamwork and communications (v1.0): Added the startMigration method to the chat resource. (+7 more)16 May
- Identity and access (v1.0): Added the verifiableCredentialAuthenticationMethodTarget resource. (+1 more)15 May
14 more
- User (v1.0): Added support for the MailTips.ReadBasic.Shared delegated permission to the getMailTips method of the user resource. (+1 more)15 May
- Compliance (beta): Added the AlertSubmission member to the auditLogRecordType enumeration. (+61 more)15 May
- People and workplace intelligence (beta): Removed the GET operation from the photoUpdateSettings resource. (+2 more)14 May
- Security (beta): Added the contentActivityMetadata resource type. (+1 more)13 May
- Applications (v1.0): Added the customSecurityAttributeComparisonOperator enumeration type. (+10 more)13 May
- Files (beta): Added the Upsert permissions operation to the fileStorageContainer resource. Use delta patch to create or update up to 10 permission object…13 May
- Files (v1.0): Added the Upsert permissions operation to the fileStorageContainer resource. Use delta patch to create or update up to 10 permission object…13 May
- Identity and access (beta): Added the identityGovernance property to the user resource. (+1 more)13 May
- Identity and access (beta): Added the identityGovernanceUserSettings resource. (+1 more)13 May
- Groups (v1.0): Added the notifyMembers enumeration type. (+4 more)12 May
- Security (beta): Added the ioTDeviceImportanceType enumeration type. (+15 more)12 May
- Security (v1.0): Added the ioTDeviceImportanceType enumeration type. (+15 more)12 May
- Identity and access (v1.0): Added the subjects navigation property to the entitlementManagement resource type.12 May
- Backup and recovery (v1.0): Added the browsableResourceType enumeration type. (+18 more)11 May
Windows 365 what's new · 4
- Autopilot device preparation for Cloud PC provisioning is now available11 May
- Improved licensing assignment logic for Cloud PC resize operations is now available11 May
- RDP Multipath with redundant TCP transport paths begins GA rollout11 May
OpenAI API changelog · 2
- Deprecated DALL·E model snapshots and the Realtime API Beta.12 May
- Added return_token_budget for the Responses API web search tool.11 May
Azure Infrastructure Blog · 1
Microsoft Graph PowerShell SDK release notes · 1
Azure Governance and Management Blog · 1
Microsoft 365 Blog · 1
Microsoft Intune what's new · 1
Azure updates1
From the community9
- Planner Synchronization of Microsoft 365 Message Center Notifications Improves15 May
- Turn HTML tables into Excel workbooks with PSParseHTML and PSWriteOffice15 May
- Why Graph-added People Skills Don’t Show Up on the User Profile Card14 May
- Understanding How Graph Permissions for Groups Work13 May
- Using the Microsoft Graph to Archive SharePoint Online Files12 May
Microsoft 365 roadmap31
Purview · 10
- Microsoft Purview compliance portal: Endpoint Data Loss Prevention: Expand protection to Copilot + PC devices for Recall snapshots through custom policies15 May
- Microsoft Purview: Data Loss Prevention- Additional Diagnostics for Data Loss Prevention and Information Protection15 May
- Microsoft Purview Compliance Portal: Enhancements to variant limits and detection groups14 May
7 more
- Microsoft Purview compliance portal: Priva Privacy Management – Multicloud environments14 May
- Microsoft Purview: Data Loss Prevention for Microsoft 365 Copilot to safeguard prompts14 May
- Microsoft Purview: Data Loss Prevention – Enhancements to Data Security Triage Agent14 May
- Microsoft Purview: Data Security Triage agent in DLP is generally available worldwide14 May
- Microsoft Purview: Data Loss Prevention – File Testing Against Sensitive Information Classifiers11 May
- Microsoft Purview: Endpoint Data Loss Prevention - Add support of hyperlinks in warn & block toast messages for Edge browser11 May
- Microsoft Purview: Insider Risk Management – Pay-as-you-go model for Other Generative AI apps indicators11 May
Microsoft 365 Copilot · 7
- Microsoft Copilot (Microsoft 365): Copilot People Connectors introduces people data ingestions with differentiated access control15 May
- Microsoft Copilot (Microsoft 365): Copilot Search Matches on People's Department15 May
- Microsoft Copilot (Microsoft 365): Dynamic Tool Discovery for Declarative Agents and Federated Copilot Connectors13 May
4 more
- Microsoft Copilot (Microsoft 365): Admins will be able to define rules to automate agent lifecycle management.12 May
- Microsoft Copilot (Microsoft 365): Copilot voice support in Word & PowerPoint.11 May
- Microsoft Edge: Microsoft Edge can now send work related browsing history to Copilot for more relevant work results when searching on M365 Copilot search11 May
- Microsoft Edge: v.148 - Shadow AI11 May
Teams · 6
- Microsoft Teams: Brand Impersonation Protection for Teams Calling12 May
- Microsoft Teams: Enhanced media quality for Direct Guest Join12 May
- Microsoft Teams: Audio recap language expansion11 May
3 more
Copilot Studio · 3
- Microsoft Copilot Studio: Supercharge your workflows with computer use15 May
- Microsoft Copilot Studio: Use MCP-compliant tools in agent workflows15 May
- Microsoft Copilot Studio: Invoke agents as workflow steps with the agent node14 May
4 more products · 5 changes
Viva · 2
- Microsoft Viva: Agent metrics for custom reporting in Insights analyst workbench14 May
- Microsoft Viva: Viva Glint - Self service for historical imports12 May
Microsoft 365 admin center · 1
Microsoft Edge · 1
OneDrive · 1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.