Weekly briefing
Week 21 · 18 May – 24 May 2026 UTC · assess the changes, then plan the next dates.
Coming up8
-
Microsoft Windows Buffer Overflow Vulnerability
CVE-2008-4250
Same day: CISA KEV deadline: Microsoft DirectX NULL Byte Overwrite Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Defender Link Following Vulnerability; CISA KEV deadline: Microsoft Defender Denial of Service Vulnerability
-
Patch Tuesday, 9 June 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
Changed4
-
Microsoft Windows Buffer Overflow Vulnerability
CVE-2008-4250
-
Microsoft DirectX NULL Byte Overwrite Vulnerability
CVE-2009-1537
-
Defender · 2 security records
CVE-2026-41091
How this list is chosen
Changes from 18 May 2026 – 24 May 2026 UTC and dates due up to 23 Jun 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.