Research

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

63 Critical 1029 Important 1 Moderate 0 Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as important, and one rated as moderate. This month’s update includes patches for 287 products and components. The following table lists the products with the most CVEs patched this month. A full list of patched products is available in the appendix. Rank Product CVE Count 1 Microsoft Office Word 65 2 Microsoft Office Excel 64 3 SQL Server 53 4 Windows Advanced Rasterization Platform 37 5 Windows Installer 36 6 Windows Graphics Kernel 35 7 Windows Kernel 28 8 Microsoft Office

Read at Tenable Research

Vendor

Microsoft

CVSS v3.0

6.5

Exploitation

observed in the wild

Fix

available

• Tenable Research (tenable.com)
• CVE-2026-124194 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-118146 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-120002 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-118207 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-119952 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 34
   Qualys TRU Qualys 2h ago

   Microsoft Patch Tuesday, November 2026 Security Update Review

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft
2. 42
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-88230 Microsoft
3. 36
   CVE NVD 3h ago

   Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-83563 Microsoft
4. 36
   CVE NVD 3h ago

   Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

   CVSS 8.8 CVE-2026-121663 Microsoft
5. 39
   CVE NVD 3h ago

   Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute…

   CVSS 8.6 CVE-2026-121662 Microsoft
6. 53
   CVE NVD 3h ago

   Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

   CVSS 9.9 CVE-2026-120002 Microsoft
7. 45
   CVE NVD 3h ago

   Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.

   CVSS 8.1 CVE-2026-119952 Microsoft
8. 39
   CVE NVD 3h ago

   Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-119903 Microsoft
9. 39
   CVE NVD 3h ago

   Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-119892 Microsoft
10. 39
    CVE NVD 3h ago

    Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-119886 Microsoft
11. 39
    CVE NVD 3h ago

    Untrusted search path in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-119853 Microsoft
12. 39
    CVE NVD 3h ago

    Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-119818 Microsoft
13. 54
    News SecurityWeek 3h ago

    Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

    Exploited CVE-2026-124194 Microsoft
14. 58
    CVE NVD 3h ago

    Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-118207 Microsoft
15. 58
    CVE NVD 3h ago

    Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-118146 Microsoft
16. 39
    CVE NVD 3h ago

    Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-116714 Microsoft
17. 39
    CVE NVD 3h ago

    Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-113862 Microsoft
18. 36
    CVE NVD 3h ago

    Stack-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-112811 Microsoft
19. 36
    CVE NVD 3h ago

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-109473 Microsoft
20. 36
    CVE NVD 3h ago

    Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-105524 Microsoft