In this month’s release, Redmond patched 60 CVEs including two other zero-days and a SharePoint Server remote code execution vulnerability rated critical.
Article Link: Microsoft fixes exploited Qakbot-delivering 0-day in May Patch Tuesday | SC Media