WEEKLY BRIEFING · 18 MAY – 24 MAY 2026 · UTC
Full source inventory · public sources only
Week 21 sources
No new MSRC release that week. 21 roadmap changes, led by Teams (9) and Outlook (5). CISA added 6 Microsoft CVEs to its Known Exploited Vulnerabilities catalog. 1 lifecycle milestone fall in the next 30 days. 22 Azure updates, including 1 retirement. 8 Windows and security articles from Microsoft blogs.
21Roadmap changes across 7 products
8Windows and security articles
6Microsoft CVEs added to CISA KEV
Security to act on6
- CVE-2026-45498 — Microsoft Defender Denial of Service VulnerabilityKEV 20 May
- CVE-2026-41091 — Microsoft Defender Link Following VulnerabilityKEV 20 May
- CVE-2010-0806 — Microsoft Internet Explorer Use-After-Free VulnerabilityKEV 20 May
- CVE-2010-0249 — Microsoft Internet Explorer Use-After-Free VulnerabilityKEV 20 May
- CVE-2009-1537 — Microsoft DirectX NULL Byte Overwrite VulnerabilityKEV 20 May
- CVE-2008-4250 — Microsoft Windows Buffer Overflow VulnerabilityKEV 20 May
Windows and security news8
Lifecycle milestones in the next 30 days1
- End of servicing: Microsoft Configuration Manager, Version 2409 6 Jun
Product news29
Microsoft Graph · 9
- Reports (beta): 12 API change passages22 May
- Teamwork and communications (beta): 7 API change passages22 May
- Backup and recovery (v1.0): 5 API change passages22 May
6 more
- Cloud communications (beta): 2 API change passages22 May
- Identity and access (beta): 1 API change passage21 May
- Devices and app management (beta): 4 API change passages20 May
- Device and app management (beta): 39 API change passages20 May
- Device and app management (beta): 1 API change passage19 May
- Device and app management (beta): 16 API change passages19 May
PowerShell · 5
- v7.6.2 Release of PowerShell21 May
- v7.5.7 Release of PowerShell21 May
- v7.4.16 Release of PowerShell21 May
2 more
Google Gemini · 3
- Launched the Managed Agents in the Gemini API in public preview.19 May
- Released gemini-3.5-flash, the generally available (GA) version of Gemini 3.5 Flash, our most intelligent model for sustained frontier performance on agentic and coding…19 May
- Released the general-purpose Antigravity Agent managed agent, antigravity-preview-05-2026, in public preview.19 May
Ubiquiti UniFi · 3
- UniFi OS - Dream Machines 5.1.1221 May
- UniFi OS - Dream Machine Beast 5.1.1121 May
- UniFi Network Application 10.4.5718 May
OpenAI · 2
- Released Secure MCP Tunnel for enterprise customers.19 May
- You can now manage multiple IP allowlists and apply each one at the project level or across the whole organization.19 May
Defender · 1
Entra PowerShell · 1
- Microsoft.Entra 1.3.018 May
GitLab · 1
- GitLab 19.021 May
GPOZaurr · 1
- GPOZaurr 1.1.1022 May
Intune · 1
PSResourceGet · 1
Teams PowerShell · 1
- MicrosoftTeams 7.8.018 May
Azure updates22
- Generally Available: Entra-only identities with Azure Files21 May
- Generally Available: Azure NetApp Files object REST API21 May
- Retirement: TLS 1.0 and TLS 1.1 in Azure App Service, Azure Functions, and Azure Logic Apps21 May
- Generally Available: User Groups and IP address pools for P2S connections21 May
- Public Preview: TLS/SSL certificate support for Azure Functions Flex Consumption21 May
17 more
- Generally Available: SQL Server on Azure VMs in Malaysia West, Indonesia Central20 May
- Update: Microsoft Entra ID token refresh support for Python, .NET, and JavaScript in Azure Database for PostgreSQL20 May
- Generally Available: langchain-azure-cosmosdb python package for Azure Cosmos DB20 May
- Generally Available: Azure Storage Mover Blob-to-Blob migration20 May
- Generally Available: Schedule one-time or recurring migrations with Azure Storage Mover20 May
- Generally Available: site-to-site VPN connections with certificate authentication20 May
- Public Preview: Summarized advertised gateway prefixes for route advertisement20 May
- Generally Available: Azure Event Grid releases for April 202620 May
- Public Preview: Azure Event Grid Subscription Identifiers20 May
- Public Preview: Evaluate feature rollouts with Azure App Configuration Scorecards19 May
- Generally Available: Azure NetApp Files cache volumes19 May
- Generally Available: Azure Virtual Network updates – default limits increased for NSGs and route tables19 May
- Generally Available: Network Watcher rule impact analyser19 May
- Generally Available: Mock runs for Azure Storage Actions – Validate before you execute19 May
- Generally Available: Application Insights Auto-instrumentation for Azure Kubernetes Service apps18 May
- Generally Available: Auto activation for SaaS subscriptions in Microsoft Marketplace18 May
- Generally Available: Azure Front Door WebSocket18 May
From the community5
- Move data between databases, CSV, and Excel with DbaClientX and PSWriteOffice23 May
- Use an allowlist for VS Code extensions20 May
- AD Fundamentals: Group Policy Permissions & Owner Rights20 May
- How to Block Access for High-Risk AI Agents19 May
- Domainless SAML federation in Microsoft Entra External ID19 May
Microsoft 365 roadmap21
Teams · 9
- Microsoft Teams: Book future meetings directly from Teams panels20 May
- Microsoft Teams: Identify bots joining your Teams meetings19 May
- Microsoft Teams: Create custom templates for immersive events in Microsoft Teams18 May
6 more
- Microsoft Teams: Digital signage in Teams Rooms on Android18 May
- Microsoft Teams: Easily find unsent drafts18 May
- Microsoft Teams: Enhanced issue detection in Teams Rooms on Windows and auto-remediation with Teams Rooms Pro Management.18 May
- Microsoft Teams: New Organization chart in the Profile Card for Web and Desktop18 May
- Microsoft Teams: Resizable Gallery in Teams Meetings18 May
- Microsoft Teams: Video recap in Teams18 May
Outlook · 5
- Outlook: Navigate Your Favorite Folders Without Expanding the Folder Pane21 May
- Outlook: Calendar Conditional Formatting in New Outlook20 May
- Outlook: Instantly Find Rules, Quick Steps, and More by Name19 May
2 more
Microsoft 365 Copilot · 3
- Microsoft CoPilot (Microsoft 365): List email attachments in M365 Copilot19 May
- Microsoft Copilot (Microsoft 365): App Navigation Pane Update18 May
- Microsoft Copilot (Microsoft 365): Work IQ APIs: Researcher Agent Access18 May
Microsoft Edge · 1
3 more products · 3 changes
Purview · 1
SharePoint · 1
Viva · 1
Other public updates33
- Microsoft Teams: In‑meeting toggle to turn Meeting AI on or off22 May
- Interact with your favorite apps on Teams using Slash ( / ) Commands22 May
- Microsoft Teams: Proximity join support for presenters in Teams events from Teams Rooms on Windows and Android22 May
- Microsoft Outlook: External email tag now supported in Inbox Rules22 May
- Microsoft Viva Glint: Custom confidentiality statements22 May
28 more
- PowerPoint for Mac: 'Prepare for Questions' skill in Copilot22 May
- PowerPoint for Windows Desktop: 'Prepare for Questions' skill in Copilot22 May
- PowerPoint for Web: 'Prepare for Questions' skill in Copilot22 May
- New file download manager in Teams21 May
- Microsoft Purview | Data Security Posture Management: New data security agent in DSPM21 May
- Microsoft Teams: Quick Share for images21 May
- Microsoft Teams: New search experience for cloud files in the file attach picker21 May
- Action Required: Update active Exchange Web Services Applications21 May
- Microsoft Teams: Attend Microsoft webinars from Teams Rooms on Android21 May
- Microsoft Teams: Unblock users to send message while file is uploading in the background21 May
- Microsoft Purview | Data Loss Prevention: Faster policy sync (2 hours to 30 minutes)21 May
- Microsoft Teams: A refreshed in-meeting experience with simpler controls and a smarter share panel20 May
- Microsoft Purview | Data Security Investigations: Proactive AI insights in Data Security Posture Management20 May
- Microsoft Copilot Notebooks: Introducing Infographics20 May
- Dynamics 365 Contact Center – Enable AI-assisted time-off and swap requests20 May
- New flexibility and choice for sharing organizational data across Microsoft 365 and Viva apps19 May
- Microsoft Teams: Front-of-room view control for Webinars and structured meetings in Teams Rooms on Android19 May
- Microsoft Purview Data Security Investigations: Notifications and enhanced search19 May
- Keyboard shortcut dialog has search functionality19 May
- Updated Secure Boot status report in Windows Autopatch19 May
- Dynamics 365 Sales - Get sales operations insights in Sales Research Agent19 May
- Outlook on the web: New setting to use data classification services for DLP evaluation18 May
- Update to agents in SharePoint: Simpler launch experience and new site AI settings18 May
- SharePoint Pages: Heading 1 (H1) option now available in web part title areas18 May
- Microsoft Copilot Studio – Classic agent creation moves from Teams to web experience, retiring June 30, 202618 May
- Dynamics 365 Contact Center – Secondary audio device for notifications in Digital Messaging conversations18 May
- Microsoft Dataverse - Solution-aware tables and metadata in Dataverse now classified as file storage18 May
- Microsoft Viva Copilot Analytics: Daily Copilot usage snapshot with fresh data18 May
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.