Key Takeaways
- Microsoft fixed a record-breaking 1,235 security vulnerabilities.
- One actively exploited zero-day vulnerability affects Microsoft Outlook.
- The update includes 66 Critical vulnerabilities.
- Elevation of Privilege (536) and Remote Code Execution (296) are the largest vulnerability categories.
- Around 639 vulnerabilities affect Windows and its components.
Microsoft Fixes 1235 Security Vulnerabilities and 1 Zero-Day Vulnerability in November 2026 Patch Tuesday! Microsoft’s November 2026 Patch Tuesday addresses a record-breaking 1,235 security vulnerabilities, including one actively exploited zero-day vulnerability affecting Microsoft Outlook. The update also includes 66 Critical vulnerabilities, highlighting the importance of applying the latest security updates.
Table of Content
Table of Contents
Microsoft Fixes 1235 Security Vulnerabilities and 1 Zero-Day Vulnerability in November 2026 Patch Tuesday
Among the reported vulnerabilities, 536 are Elevation of Privilege, 296 are Remote Code Execution, and 157 are Information Disclosure. Approximately 639 vulnerabilities affect Windows and its components, making this update important for Windows administrators.
| Release Date | CVE Number | CVE Title | Publicly disclosed | Exploited |
|---|---|---|---|---|
| Nov 10, 2026 | CVE-2026-124194 | Microsoft Outlook Spoofing Vulnerability | No | Yes |
- How to Check Your Windows 11 Edition
- Easy Methods to Know the Version of Installed Apps in Windows 11
November 2026 Patch Tuesday: Vulnerabilities Across Multiple Security Categories
The November 2026 Patch Tuesday updates cover multiple vulnerability categories, including Information Disclosure, Denial of Service, Security Feature Bypass, Remote Code Execution, and Spoofing. The updates also address 142 vulnerabilities in Microsoft Edge (Chromium-based), helping improve the overall security of Microsoft products and services.
- 157 Information Disclosure Vulnerabilities
- 46 Denial of Service Vulnerabilities
- 27 Security Feature Bypass Vulnerabilities
- 296 Remote Code Execution Vulnerabilities
- 22 Spoofing Vulnerabilities
- 142 Microsoft Edge (Chromium-based) Vulnerabilities
296 Remote Code Execution Vulnerabilities
The November 2026 Patch Tuesday addresses 296 Remote Code Execution (RCE) vulnerabilities across Microsoft products and services. Some notable vulnerabilities affect Windows Performance Monitor, Windows Domain Name System (DNS), Windows Imaging Component, and Microsoft Windows Media Foundation. These security issues could allow attackers to execute malicious code on affected systems, making it important to install the latest security updates.
- CVE-2026-96993 Windows Performance Monitor Remote Code Execution Vulnerability
- CVE-2026-96177 Windows Domain Name Service Remote Code Execution Vulnerability
- CVE-2026-96164 Windows Imaging Component Remote Code Execution Vulnerability
- CVE-2026-96157 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- CVE-2026-96092 Windows Domain Name Service Remote Code Execution Vulnerability CVE-2026-96081 Windows Rich Text Edit Control Remote Code Execution Vulnerability CVE-2026-96078 Microsoft Color Management Remote Code Execution Vulnerability CVE-2026-96067 Microsoft Color Management Remote Code Execution Vulnerability CVE-2026-96064 Windows Domain Name Service Remote Code Execution Vulnerability CVE-2026-96054 Microsoft Color Management Remote Code Execution Vulnerability CVE-2026-96020 Windows Domain Name Service Remote Code Execution Vulnerability CVE-2026-96002 Windows Domain Name Service Remote Code Execution Vulnerability CVE-2026-95975 Windows Performance Counters Remote Code Execution Vulnerability CVE-2026-95964 Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-95962 Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability CVE-2026-95956 Windows eSCL Scanner Remote Code Execution Vulnerability CVE-2026-95901 Microsoft DirectMusic Remote Code Execution Vulnerability CVE-2026-95896 Microsoft DirectMusic Remote Code Execution Vulnerability CVE-2026-95891 Microsoft DirectMusic Remote Code Execution Vulnerability CVE-2026-95882 Microsoft DirectMusic Remote Code Execution Vulnerability CVE-2026-94511 SQL Server Remote Code Execution Vulnerability CVE-2026-88249 Windows Client for NFS Remote Code Execution Vulnerability CVE-2026-88244 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability CVE-2026-88243 Windows DHCP Server Remote Code Execution Vulnerability CVE-2026-88234 Windows iSCSI Remote Code Execution Vulnerability CVE-2026-88229 Windows Media Player Remote Code Execution Vulnerability CVE-2026-88222 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability CVE-2026-88218 Windows DNS Remote Code Execution Vulnerability CVE-2026-88216 Windows DHCP Server Remote Code Execution Vulnerability CVE-2026-88212 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability CVE-2026-88111 SQL Server Remote Code Execution Vulnerability CVE-2026-85839 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability CVE-2026-85838 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability CVE-2026-81384 Windows DNS Server Remote Code Execution Vulnerability CVE-2026-72998 Windows DHCP Server Remote Code Execution Vulnerability CVE-2026-70094 Visual Studio Code Remote Code Execution Vulnerability CVE-2026-69565 Windows Remote Desktop Services Remote Code Execution Vulnerability CVE-2026-69327 Windows Remote Desktop Services Remote Code Execution Vulnerability CVE-2026-67646 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-67637 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-67632 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-67391 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-67374 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-67372 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-66801 Microsoft Xbox Remote Code Execution Vulnerability CVE-2026-125136 Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability CVE-2026-125134 Windows Function Discovery Resource Publication Remote Code Execution Vulnerability CVE-2026-124229 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-124228 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-124227 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-124225 Windows PowerShell Remote Code Execution Vulnerability CVE-2026-124187 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-124185 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-124176 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-124174 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-124170 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-123394 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-123390 Microsoft Office SharePoint Remote Code Execution Vulnerability CVE-2026-123385 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-123384 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123383 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123382 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123381 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123380 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123379 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123378 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123377 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123376 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-123375 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-122475 Windows Storage Spaces Controller Remote Code Execution Vulnerability CVE-2026-122198 Microsoft Office Remote Code Execution Vulnerability CVE-2026-122194 Microsoft Defender Remote Code Execution Vulnerability CVE-2026-122176 Windows SMB Remote Code Execution Vulnerability CVE-2026-122171 Microsoft XPS Document Converter Remote Code Execution Vulnerability CVE-2026-122163 Windows Image Acquisition Remote Code Execution Vulnerability CVE-2026-121664 Visual Studio Code Remote Code Execution Vulnerability CVE-2026-121662 Visual Studio Code Remote Code Execution Vulnerability CVE-2026-120791 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-120790 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-120789 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-120788 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-120786 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-120785 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-120780 Visual Studio Code Remote Code Execution Vulnerability CVE-2026-120779 Visual Studio Code Remote Code Execution Vulnerability CVE-2026-120005 Microsoft PowerPoint Remote Code Execution Vulnerability CVE-2026-120003 Microsoft Office Remote Code Execution Vulnerability CVE-2026-120001 Microsoft Office PowerPoint Remote Code Execution Vulnerability CVE-2026-120000 Microsoft Office SharePoint Remote Code Execution Vulnerability CVE-2026-119997 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-119996 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-119995 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-119989 Azure Pipelines Remote Code Execution Vulnerability CVE-2026-119988 Windows SMB Remote Code Execution Vulnerability CVE-2026-119986 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-119985 Visual Studio Code Remote Code Execution Vulnerability CVE-2026-119975 Visual Studio Code Remote Code Execution Vulnerability CVE-2026-119969 Graphic Fonts Remote Code Execution Vulnerability CVE-2026-119967 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability CVE-2026-119964 Windows Message Queuing Remote Code Execution Vulnerability CVE-2026-119963 Windows Message Queuing Remote Code Execution Vulnerability CVE-2026-119962 Windows CredSSP Remote Code Execution Vulnerability CVE-2026-119961 Windows Internet Information Services Remote Code Execution Vulnerability CVE-2026-119958 Windows LDAP – Lightweight Directory Access Protocol Remote Code Execution Vulnerability CVE-2026-119952 Windows Schannel Remote Code Execution Vulnerability CVE-2026-119951 Windows Deployment Services Remote Code Execution Vulnerability CVE-2026-119948 Windows Active Directory Remote Code Execution Vulnerability CVE-2026-119945 Windows Modern Device Management (MDM) Remote Code Execution Vulnerability CVE-2026-119938 Windows Shell Remote Code Execution Vulnerability CVE-2026-119934 Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-119908 Windows Storage Spaces Controller Remote Code Execution Vulnerability CVE-2026-119880 Microsoft XPS Document Converter Remote Code Execution Vulnerability CVE-2026-119858 Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-119849 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability CVE-2026-119823 Windows Storport Miniport Driver Remote Code Execution Vulnerability CVE-2026-119394 Windows Enhanced Storage Remote Code Execution Vulnerability CVE-2026-119390 Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-118745 Visual Studio Remote Code Execution Vulnerability CVE-2026-118737 Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2026-118732 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118731 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118730 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118729 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118726 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118724 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118723 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118722 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118721 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118720 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118719 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118718 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118717 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118716 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118714 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118713 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118712 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118711 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118710 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118709 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118708 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118707 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118706 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118705 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118704 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118703 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118702 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118701 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118700 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118302 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118301 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118299 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118298 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118297 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118296 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118295 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118294 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118293 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118292 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-118207 Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2026-118149 Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2026-118146 Windows Active Directory Domain Services Remote Code Execution Vulnerability CVE-2026-118145 Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability CVE-2026-118141 Windows Client for NFS Remote Code Execution Vulnerability CVE-2026-118106 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116947 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116946 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116945 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116942 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116941 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116938 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116937 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116936 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116933 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116931 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116930 Microsoft SQL Server Remote Code Execution Vulnerability CVE-2026-116928 Windows Search Remote Code Execution Vulnerability CVE-2026-116927 Microsoft Office Excel Remote Code Execution Vulnerability CVE-2026-116925 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-116923 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-116722 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-116720 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-116719 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-116718 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-116717 Microsoft Office Remote Code Execution Vulnerability CVE-2026-116710 Windows Message Queuing Remote Code Execution Vulnerability CVE-2026-116706 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability CVE-2026-116699 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability CVE-2026-116698 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability CVE-2026-114169 Windows Raw Image Extension Remote Code Execution Vulnerability CVE-2026-114167 HEVC Video Extensions Remote Code Execution Vulnerability CVE-2026-114165 HEVC Video Extensions Remote Code Execution Vulnerability CVE-2026-114164 HEVC Video Extensions Remote Code Execution Vulnerability CVE-2026-114159 Visual Studio Remote Code Execution Vulnerability CVE-2026-114158 Visual Studio Remote Code Execution Vulnerability CVE-2026-114152 Visual Studio Remote Code Execution Vulnerability CVE-2026-114151 Visual Studio Remote Code Execution Vulnerability CVE-2026-113862 Windows Network Address Translation (NAT) Remote Code Execution Vulnerability CVE-2026-113859 Windows TCP/IP Remote Code Execution Vulnerability CVE-2026-113855 Windows DNS Remote Code Execution Vulnerability CVE-2026-113848 Windows NTFS Remote Code Execution Vulnerability CVE-2026-113825 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability CVE-2026-113814 Windows Storage Spaces Controller Remote Code Execution Vulnerability CVE-2026-113768 Windows Performance Counters Remote Code Execution Vulnerability CVE-2026-113759 Microsoft Word Remote Code Execution Vulnerability CVE-2026-113752 Windows Print Spooler Components Remote Code Execution Vulnerability CVE-2026-113749 Microsoft Windows Codecs Library Remote Code Execution Vulnerability CVE-2026-112985 Windows JScript Remote Code Execution Vulnerability CVE-2026-112972 Windows SMBv3 Server Remote Code Execution Vulnerability CVE-2026-112967 Windows Xbox Live Networking Service Remote Code Execution Vulnerability CVE-2026-112741 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112739 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112737 Microsoft Office PowerPoint Remote Code Execution Vulnerability CVE-2026-112735 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112734 Microsoft Office PowerPoint Remote Code Execution Vulnerability CVE-2026-112733 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112730 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112729 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112728 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112727 Windows Domain Name Service Remote Code Execution Vulnerability CVE-2026-112726 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112724 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112723 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112722 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112721 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112719 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112718 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112717 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112716 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112715 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-112714 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111310 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111309 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-111308 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111307 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111306 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111305 Microsoft Office Access Remote Code Execution Vulnerability CVE-2026-111304 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111302 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111301 Microsoft Office Access Remote Code Execution Vulnerability CVE-2026-111299 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111298 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111295 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111294 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111290 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111289 Microsoft Office Remote Code Execution Vulnerability CVE-2026-111287 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-111286 Microsoft Office Remote Code Execution Vulnerability CVE-2026-111285 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110068 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-110067 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110064 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110062 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110061 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110060 Microsoft Office Access Remote Code Execution Vulnerability CVE-2026-110059 Microsoft Office Access Remote Code Execution Vulnerability CVE-2026-110058 Microsoft Office Access Remote Code Execution Vulnerability CVE-2026-110056 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110055 Microsoft Word Remote Code Execution Vulnerability CVE-2026-110054 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110053 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110052 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110050 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110049 Microsoft Word Remote Code Execution Vulnerability CVE-2026-110048 Microsoft Word Remote Code Execution Vulnerability CVE-2026-110047 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-110044 Microsoft Office SharePoint Remote Code Execution Vulnerability CVE-2026-110043 Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-109505 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-109503 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-109501 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-109500 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-109499 Microsoft Office SharePoint Remote Code Execution Vulnerability CVE-2026-109498 Microsoft Office Access Remote Code Execution Vulnerability CVE-2026-109496 Microsoft Office Visio Remote Code Execution Vulnerability CVE-2026-109494 Microsoft Office Visio Remote Code Execution Vulnerability CVE-2026-109493 Microsoft Office Access Remote Code Execution Vulnerability CVE-2026-109491 Microsoft Office Word Remote Code Execution Vulnerability CVE-2026-109487 Microsoft PowerPoint Remote Code Execution Vulnerability CVE-2026-109472 Microsoft Office SharePoint Remote Code Execution Vulnerability CVE-2026-109467 Azure DevOps Server Remote Code Execution Vulnerability CVE-2026-109464 Microsoft Office SharePoint Remote Code Execution Vulnerability CVE-2026-109463 Windows DNS Remote Code Execution Vulnerability CVE-2026-109459 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability CVE-2026-109457 Azure CLI Remote Code Execution Vulnerability CVE-2026-108411 Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2026-108404 Windows CD-ROM Driver Remote Code Execution Vulnerability CVE-2026-108401 Remote Desktop Services Remote Code Execution Vulnerability CVE-2026-105580 Windows Management Instrumentation Remote Code Execution Vulnerability CVE-2026-105578 Microsoft JScript Remote Code Execution Vulnerability CVE-2026-105560 Windows DHCP Server Remote Code Execution Vulnerability CVE-2026-105558 Windows Deployment Services Remote Code Execution Vulnerability CVE-2026-105542 Windows NTFS Remote Code Execution Vulnerability CVE-2026-105534 Windows Storage Remote Code Execution Vulnerability CVE-2026-105518 Windows iSCSI Remote Code Execution Vulnerability CVE-2026-102219 Windows Modern Device Management (MDM) Remote Code Execution Vulnerability CVE-2026-100204 HEIF Image Extensions Remote Code Execution Vulnerability
157 Information Disclosure Vulnerabilities
The November 2026 Patch Tuesday addresses 157 Information Disclosure vulnerabilities across Microsoft products. Some notable vulnerabilities affect Windows DNS and the Secondary Logon service. These issues could let attackers access sensitive information on affected systems, underscoring the importance of installing the latest security updates.
- CVE-2026-97006 Windows DNS Information Disclosure Vulnerability CVE-2026-96989 Secondary Logon Information Disclosure Vulnerability CVE-2026-96988 Windows DNS Information Disclosure Vulnerability CVE-2026-96987 Windows DNS Information Disclosure Vulnerability CVE-2026-96986 Windows DNS Information Disclosure Vulnerability CVE-2026-96985 Windows DNS Information Disclosure Vulnerability CVE-2026-96984 Windows DNS Information Disclosure Vulnerability CVE-2026-96980 Windows DNS Information Disclosure Vulnerability CVE-2026-96976 Windows DNS Information Disclosure Vulnerability CVE-2026-96972 Windows DNS Server Information Disclosure Vulnerability CVE-2026-96970 Windows DNS Information Disclosure Vulnerability CVE-2026-96156 Windows Broker Infrastructure Service Information Disclosure Vulnerability CVE-2026-96150 Microsoft Windows Codecs Library Information Disclosure Vulnerability CVE-2026-96144 Windows Graphics Kernel Information Disclosure Vulnerability CVE-2026-96137 Windows Graphics Kernel Information Disclosure Vulnerability CVE-2026-96133 Windows Graphics Kernel Information Disclosure Vulnerability CVE-2026-96112 Windows DNS Server Information Disclosure Vulnerability CVE-2026-96110 Windows OLE Information Disclosure Vulnerability CVE-2026-96101 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability CVE-2026-96093 Windows Internet (wininet.dll) Information Disclosure Vulnerability CVE-2026-96059 HID class driver Information Disclosure Vulnerability CVE-2026-96058 Windows Kernel Information Disclosure Vulnerability CVE-2026-96048 Windows Graphics Kernel Information Disclosure Vulnerability CVE-2026-96041 Windows USB Hub Driver Information Disclosure Vulnerability CVE-2026-96022 Windows Text Services Framework Information Disclosure Vulnerability CVE-2026-96018 Windows AppContainer Information Disclosure Vulnerability CVE-2026-96001 Windows Bluetooth Service Information Disclosure Vulnerability CVE-2026-95977 Windows Event Viewer Information Disclosure Vulnerability CVE-2026-95946 Windows Graphics Kernel Information Disclosure Vulnerability CVE-2026-95908 Windows Remote Desktop Client Information Disclosure Vulnerability CVE-2026-95893 Win32k Information Disclosure Vulnerability CVE-2026-95884 Windows Active Directory Certificate Services Information Disclosure Vulnerability CVE-2026-94517 Windows Kernel Transaction Manager Information Disclosure Vulnerability CVE-2026-88247 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability CVE-2026-88231 Windows iSCSI Information Disclosure Vulnerability CVE-2026-88220 Windows Performance Counters Information Disclosure Vulnerability CVE-2026-88217 Windows Graphics Kernel Information Disclosure Vulnerability CVE-2026-88211 Graphic Fonts Information Disclosure Vulnerability CVE-2026-84005 AMD Zen Information Disclosure Vulnerability CVE-2026-84004 AMD Zen Information Disclosure Vulnerability CVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure Vulnerability CVE-2026-83684 Windows iSCSI Target Service Information Disclosure Vulnerability CVE-2026-68783 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-67382 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-62903 Microsoft.Data.SqlClient Information Disclosure Vulnerability CVE-2026-124233 Microsoft Office Word Information Disclosure Vulnerability CVE-2026-124210 Microsoft Office SharePoint Information Disclosure Vulnerability CVE-2026-124183 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-124179 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-124178 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-123395 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-122985 Microsoft PowerShell Information Disclosure Vulnerability CVE-2026-122297 Windows Kernel Transaction Manager Information Disclosure Vulnerability CVE-2026-122196 Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability CVE-2026-122162 Windows Update Stack Information Disclosure Vulnerability CVE-2026-121678 Windows Remote Desktop Client Information Disclosure Vulnerability CVE-2026-121677 Windows Remote Desktop Client Information Disclosure Vulnerability CVE-2026-121675 PowerShell Information Disclosure Vulnerability CVE-2026-121674 PowerShell Information Disclosure Vulnerability CVE-2026-121669 PowerShell Information Disclosure Vulnerability CVE-2026-120792 Aspire Information Disclosure Vulnerability CVE-2026-119999 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-119993 Microsoft Office Outlook Information Disclosure Vulnerability CVE-2026-119991 Microsoft Configuration Manager Information Disclosure Vulnerability CVE-2026-119976 Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability CVE-2026-119971 Windows DNS Server Information Disclosure Vulnerability CVE-2026-119970 Windows DNS Information Disclosure Vulnerability CVE-2026-119946 HTTP.sys Information Disclosure Vulnerability CVE-2026-119942 HTTP.sys Information Disclosure Vulnerability CVE-2026-119910 Win32k Information Disclosure Vulnerability CVE-2026-119889 ActiveSyncProvider Information Disclosure Vulnerability CVE-2026-119887 Windows Installer Information Disclosure Vulnerability CVE-2026-119882 Windows Remote Desktop Services Information Disclosure Vulnerability CVE-2026-119875 Windows Storport Miniport Driver Information Disclosure Vulnerability CVE-2026-119857 Windows Kernel Information Disclosure Vulnerability CVE-2026-119856 Win32k Information Disclosure Vulnerability CVE-2026-119855 Windows COM+ Event System Service Information Disclosure Vulnerability CVE-2026-119841 Windows Graphics Kernel Information Disclosure Vulnerability CVE-2026-119838 Windows Installer Information Disclosure Vulnerability CVE-2026-119836 Windows Management Services Information Disclosure Vulnerability CVE-2026-119825 Win32k Information Disclosure Vulnerability CVE-2026-119395 Storport.sys Driver Information Disclosure Vulnerability CVE-2026-118736 Windows Network File System Information Disclosure Vulnerability CVE-2026-118728 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-118727 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-118300 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-118214 Windows Advanced Rasterization Platform Information Disclosure Vulnerability CVE-2026-118213 Windows Deployment Services Information Disclosure Vulnerability CVE-2026-118140 Server for NFS Information Disclosure Vulnerability CVE-2026-118104 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-118103 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-118102 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-116943 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-116940 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-116939 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-116935 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-116932 Microsoft SQL Server Information Disclosure Vulnerability CVE-2026-116922 Microsoft Office PowerPoint Information Disclosure Vulnerability CVE-2026-116721 Microsoft Office Word Information Disclosure Vulnerability CVE-2026-114166 Microsoft Raw Image Extension Information Disclosure Vulnerability CVE-2026-114150 ASP.NET Core Information Disclosure Vulnerability CVE-2026-113823 Azure CycleCloud Information Disclosure Vulnerability CVE-2026-113821 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability CVE-2026-113818 Windows Deployment Services Information Disclosure Vulnerability CVE-2026-113772 Windows Redirected Drive Buffering Information Disclosure Vulnerability CVE-2026-113764 Windows Projected File System Information Disclosure Vulnerability CVE-2026-113757 Windows FileCrypt Driver Information Disclosure Vulnerability CVE-2026-113754 Windows FileCrypt Driver Information Disclosure Vulnerability CVE-2026-112977 Windows Deployment Services Information Disclosure Vulnerability CVE-2026-112965 Windows Management Instrumentation Information Disclosure Vulnerability CVE-2026-112809 Windows Composite Image File System Information Disclosure Vulnerability CVE-2026-112808 Windows Print Spooler Components Information Disclosure Vulnerability CVE-2026-112806 Windows Print Spooler Components Information Disclosure Vulnerability CVE-2026-112803 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability CVE-2026-112789 Windows Installer Information Disclosure Vulnerability CVE-2026-112757 Windows Secure Kernel Mode Information Disclosure Vulnerability CVE-2026-112754 Microsoft Graphics Component Information Disclosure Vulnerability CVE-2026-112750 Windows Overlay Filter Information Disclosure Vulnerability CVE-2026-112745 Azure DevOps Server Information Disclosure Vulnerability CVE-2026-112738 Microsoft Office PowerPoint Information Disclosure Vulnerability CVE-2026-112731 Microsoft Office Information Disclosure Vulnerability CVE-2026-112720 Microsoft Office Word Information Disclosure Vulnerability CVE-2026-111293 Microsoft Office Information Disclosure Vulnerability CVE-2026-111292 Microsoft Office Excel Information Disclosure Vulnerability CVE-2026-111291 Microsoft Office Information Disclosure Vulnerability CVE-2026-111288 Microsoft Office Word Information Disclosure Vulnerability CVE-2026-110066 Microsoft Office Word Information Disclosure Vulnerability CVE-2026-110057 Microsoft Office SharePoint Information Disclosure Vulnerability CVE-2026-110051 Microsoft Office Word Information Disclosure Vulnerability CVE-2026-110046 Microsoft Office Word Information Disclosure Vulnerability CVE-2026-109485 Microsoft 365 Agents SDK Information Disclosure Vulnerability CVE-2026-109476 ASP.NET Core Information Disclosure Vulnerability CVE-2026-109460 Microsoft Entra Private Network Connector Information Disclosure Vulnerability CVE-2026-109455 Microsoft Office SharePoint Information Disclosure Vulnerability CVE-2026-108470 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability CVE-2026-108425 Windows DNS Information Disclosure Vulnerability CVE-2026-108424 Windows GDI Information Disclosure Vulnerability CVE-2026-108423 Windows WinHTTP Information Disclosure Vulnerability CVE-2026-108419 Windows Remote Desktop Client Information Disclosure Vulnerability CVE-2026-108418 Windows Remote Desktop Client Information Disclosure Vulnerability CVE-2026-108417 Windows Remote Desktop Client Information Disclosure Vulnerability CVE-2026-108410 Windows Management Instrumentation Information Disclosure Vulnerability CVE-2026-108409 Windows Overlay Filter Information Disclosure Vulnerability CVE-2026-108408 Windows Telephony Service Information Disclosure Vulnerability CVE-2026-105584 Windows Inventory Backup Information Disclosure Vulnerability CVE-2026-105579 Windows DNS Information Disclosure Vulnerability CVE-2026-105562 Windows Container Manager Service Information Disclosure Vulnerability CVE-2026-105557 Windows DHCP Server Information Disclosure Vulnerability CVE-2026-105552 Windows Kernel Information Disclosure Vulnerability CVE-2026-105549 Windows Smart Card Information Disclosure Vulnerability CVE-2026-105537 Mailslot File System Information Disclosure Vulnerability CVE-2026-105531 Windows Print Spooler Components Information Disclosure Vulnerability CVE-2026-105530 Windows System Events Broker Information Disclosure Vulnerability CVE-2026-105506 Windows Shell Information Disclosure Vulnerability CVE-2026-102868 Windows Shell Information Disclosure Vulnerability CVE-2026-102230 Visual Studio Code Information Disclosure Vulnerability
46 Denial of Service Vulnerabilities
The November 2026 Patch Tuesday addresses 46 Denial of Service (DoS) vulnerabilities across Microsoft products. Some notable vulnerabilities affect Windows DNS, DNS Server, Windows Hyper-V, and Windows DHCP Server. These security issues could allow attackers to disrupt services and affect system availability, making it important to install the latest security updates.
- CVE-2026-96983 Windows DNS Denial of Service Vulnerability CVE-2026-96975 Role: DNS Server Denial of Service Vulnerability CVE-2026-96965 Windows Hyper-V Denial of Service Vulnerability CVE-2026-96176 Windows DNS Denial of Service Vulnerability CVE-2026-96134 Windows DHCP Server Denial of Service Vulnerability CVE-2026-96086 Windows WLAN Service Denial of Service Vulnerability CVE-2026-96082 Windows Kerberos Denial of Service Vulnerability CVE-2026-96077 Windows TCP/IP Denial of Service Vulnerability CVE-2026-96017 Role: DNS Server Denial of Service Vulnerability CVE-2026-95913 Windows Hyper-V Denial of Service Vulnerability CVE-2026-88236 Microsoft QUIC Denial of Service Vulnerability CVE-2026-70240 Windows Kerberos Denial of Service Vulnerability CVE-2026-120796 .NET Denial of Service Vulnerability CVE-2026-119972 Remote Procedure Call Denial of Service Vulnerability CVE-2026-119955 Windows Hyper-V Denial of Service Vulnerability CVE-2026-119940 Windows Kerberos Denial of Service Vulnerability CVE-2026-119936 Windows Internet Information Services Denial of Service Vulnerability CVE-2026-119932 Windows Remote Desktop Denial of Service Vulnerability CVE-2026-119909 Windows Internet Information Services Denial of Service Vulnerability CVE-2026-119890 Windows DHCP Server Denial of Service Vulnerability CVE-2026-119848 Windows Message Queuing Denial of Service Vulnerability CVE-2026-119385 Windows Hyper-V Denial of Service Vulnerability CVE-2026-118750 ASP.NET Core Denial of Service Vulnerability CVE-2026-118749 ASP.NET Core Denial of Service Vulnerability CVE-2026-118748 ASP.NET Core Denial of Service Vulnerability CVE-2026-118747 .NET Denial of Service Vulnerability CVE-2026-118739 Windows DHCP Client Denial of Service Vulnerability CVE-2026-118153 Microsoft Exchange Server Denial of Service Vulnerability CVE-2026-116697 Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability CVE-2026-114154 ASP.NET Core Denial of Service Vulnerability CVE-2026-114149 ASP.NET Core Denial of Service Vulnerability CVE-2026-114147 ASP.NET Core Denial of Service Vulnerability CVE-2026-112975 Windows Link-Layer Discovery Protocol (LLDP) Denial of Service Vulnerability CVE-2026-112966 Windows Security Account Manager Denial of Service Vulnerability CVE-2026-112807 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability CVE-2026-112795 Windows Security Account Manager Denial of Service Vulnerability CVE-2026-109478 ASP.NET Core Denial of Service Vulnerability CVE-2026-109475 .NET Denial of Service Vulnerability CVE-2026-108402 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability CVE-2026-105568 Windows Active Directory Domain Services Denial of Service Vulnerability CVE-2026-105561 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability CVE-2026-105559 Windows Active Directory Denial of Service Vulnerability CVE-2026-105527 Windows Encrypting File System (EFS) Denial of Service Vulnerability CVE-2026-105515 Windows Message Queuing Denial of Service Vulnerability CVE-2026-105512 Microsoft QUIC Denial of Service Vulnerability CVE-2026-105492 Microsoft Remote Registry Service Denial of Service Vulnerability
27 Security Feature Bypass Vulnerabilities
The November 2026 Patch Tuesday addresses 27 Security Feature Bypass vulnerabilities across Microsoft products. Some notable vulnerabilities affect Windows BitLocker, Windows Hyper-V, JDBC Driver for SQL Server, Microsoft PowerShell, and Windows Security Account Manager Remote Protocol. These issues could let attackers bypass existing security protections, so apply the latest Microsoft security updates.
- CVE-2026-97015 Windows BitLocker Security Feature Bypass Vulnerability CVE-2026-95910 Windows Hyper-V Security Feature Bypass Vulnerability CVE-2026-70003 JDBC Driver for SQL Server Security Feature Bypass Vulnerability CVE-2026-124226 Microsoft PowerShell Security Feature Bypass Vulnerability CVE-2026-122474 Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability CVE-2026-121665 Visual Studio Code Security Feature Bypass Vulnerability CVE-2026-121663 Visual Studio Code Security Feature Bypass Vulnerability CVE-2026-121661 Visual Studio Code Security Feature Bypass Vulnerability CVE-2026-121660 Visual Studio Code Security Feature Bypass Vulnerability CVE-2026-120782 Visual Studio Code Security Feature Bypass Vulnerability CVE-2026-119998 Microsoft Office Security Feature Bypass Vulnerability CVE-2026-119983 Visual Studio Code Security Feature Bypass Vulnerability CVE-2026-119982 Visual Studio Code Security Feature Bypass Vulnerability CVE-2026-119883 Data Deduplication Security Feature Bypass Vulnerability CVE-2026-119867 Windows Installer Security Feature Bypass Vulnerability CVE-2026-119832 Windows BitLocker Security Feature Bypass Vulnerability CVE-2026-119404 Windows Client for NFS Security Feature Bypass Vulnerability CVE-2026-118746 .NET Security Feature Bypass Vulnerability CVE-2026-118740 Aspire Security Feature Bypass Vulnerability CVE-2026-114171 Visual Studio Code Security Feature Bypass Vulnerability CVE-2026-114156 ASP.NET Core Security Feature Bypass Vulnerability CVE-2026-113815 Microsoft PowerShell Security Feature Bypass Vulnerability CVE-2026-113756 Windows FileCrypt Driver Security Feature Bypass Vulnerability CVE-2026-112973 Windows Kernel Security Feature Bypass Vulnerability CVE-2026-109462 Azure Firmware Security Feature Bypass Vulnerability CVE-2026-105590 Windows Active Directory Certificate Services Security Feature Bypass CVE-2026-102236 Visual Studio Code Security Feature Bypass Vulnerability
22 Spoofing Vulnerabilities
The November 2026 Patch Tuesday addresses 22 Spoofing vulnerabilities across Microsoft products and services. Some notable vulnerabilities affect Microsoft Teams, Outlook, Windows IKE Extension, NTLM, Hyper-V, Windows DNS, Exchange Server, and SharePoint. These security issues could allow attackers to impersonate trusted users or services, potentially misleading users and compromising system security. Installing the latest security updates
- CVE-2026-69901 Microsoft Teams for Android Spoofing Vulnerability CVE-2026-124194 Microsoft Outlook Spoofing Vulnerability CVE-2026-122979 Microsoft Teams for Android Spoofing Vulnerability CVE-2026-122169 Windows IKE Extension Spoofing Vulnerability CVE-2026-121680 Windows NTLM Spoofing Vulnerability CVE-2026-119959 Windows Hyper-V Spoofing Vulnerability CVE-2026-119905 Windows DNS Spoofing Vulnerability CVE-2026-118208 Microsoft Exchange Server Spoofing Vulnerability CVE-2026-118152 Microsoft Exchange Server Spoofing Vulnerability CVE-2026-116926 Microsoft Teams Spoofing Vulnerability CVE-2026-113773 Windows DHCP Server Spoofing Vulnerability CVE-2026-112736 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-111303 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-111300 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-111297 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-110065 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-110045 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-109504 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-109497 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-109456 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-109454 Microsoft Office SharePoint Spoofing Vulnerability CVE-2026-108469 Microsoft Authentication Library for JavaScript Spoofing Vulnerability
Need Further Assistance or Have Technical Questions?
Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, join the WhatsApp Community and the Whatsapp channel to get the latest news on Microsoft Technologies. We are there on Reddit as well.
Author
Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. He is Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11 years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His focus is on Device Management technologies such as Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.