Patch Tuesday - November 2026
Microsoft is publishing 1,092 own-product vulnerabilities on November 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Until a few months ago, these volumes would have been unimaginable, but if anything, this month feels like a slight reprieve. The jury is still out on whether patching many more vulnerabilities will lead to better security outcomes; every code change to resolve a known vulnerability could easily introduce new hidden treasure for researchers or threat actors to unearth in the future. Despite the vast uptick in volume during 2026, there has been no accompanying increase in the number of vulnerabilities known to be exploited in the wild. Microsoft is aware of exp
- Vendor
- Microsoft
- CVSS v3.1
- 6.5
- Exploitation
- observed in the wild
- Fix
- available
Why it ranks 64 (High)
- Exploitation observed in the wild
- CVSS v3.1 6.5 medium
- Covered by 13 independent sources
- Fix available
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Rapid7 research (rapid7.com)
- CVE-2026-124194 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-119952 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-116928 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.