Microsoft May Patch Tuesday: wormable Windows Netlogon and DNS Client RCE bugs

Microsoft's May Patch Tuesday fixed two wormable Windows flaws an unauthenticated attacker can ride straight through enterprise networks. The Netlogon bug (CVE-2026-41089) compromises domain controllers without any user interaction. A DNS Client bug is rated equally critical.

Wormable Windows Netlogon and DNS Client RCEs land in May Patch Tuesday | Ukraine launches its largest drone strike on Moscow since the war began | Cambridge physicists make working LEDs out of insulating nanoparticles