Microsoft Patches 137 Vulnerabilities

Keypoints

• Microsoft fixed 137 vulnerabilities in its latest Patch Tuesday updates.
• CVE-2026-41103 is a critical privilege escalation flaw in the Microsoft SSO Plugin for Jira & Confluence.
• Two Microsoft Word flaws, CVE-2026-40364 and CVE-2026-40361, could allow remote code execution.
• Microsoft warned that several vulnerabilities have an exploitation rating of “exploitation more likely.”
• Adobe also patched 52 vulnerabilities across 10 products, including critical code execution issues.