Research

Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for November 2026, which includes 1328 vulnerabilities affecting a range of products, including 60 that Microsoft marked as "critical." Out of 60 "critical" vulnerabilities, 45 are remote code execution (RCE) vulnerabilities.

Read at Cisco Talos Intelligence

Vendor

Microsoft, Cisco

Product

Snort

Fix

available

Exposure class

Endpoint security

• Cisco Talos Intelligence (blog.talosintelligence.com)
• CVE-2026-124194 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-113862 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-118146 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-118148 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-118207 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 34
   News The Register 7h ago

   November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far

   Fix available CVE-2026-124194CVE-2026-116928CVE-2026-119958+1 more Microsoft
2. 64
   Research Rapid7 8h ago

   Patch Tuesday - November 2026

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-119952CVE-2026-116928 Microsoft
3. 64
   Research Rapid7 8h ago

   Patch Tuesday - November 2026

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-119952CVE-2026-116928 Microsoft
4. 52
   KrebsOnSecurity Krebs 8h ago

   Microsoft Fixes Nearly 1,100 Security Vulnerabilities

   Fix available CVE-2026-124194CVE-2026-125350 Microsoft Google
5. 45
   News CyberScoop 8h ago

   Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday

   Fix available CVE-2026-124194CVE-2026-116928 Microsoft
6. 94
   Ivanti advisory Ivanti 8h ago

   November 2026 Patch Tuesday

   Exploited CVSS 6.5 EPSS 0.83 Fix available CVE-2026-109618CVE-2026-109619CVE-2026-111497+10 more Ivanti PHP
7. 34
   Qualys TRU Qualys 9h ago

   Microsoft Patch Tuesday, November 2026 Security Update Review

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft
8. 45
   CVE NVD 11h ago

   Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

   CVSS 7.5 CVE-2026-124185 Microsoft
9. 45
   CVE NVD 11h ago

   Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

   CVSS 8.8 CVE-2026-120003 Microsoft
10. 51
    CVE NVD 11h ago

    Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119967 Microsoft
11. 51
    CVE NVD 11h ago

    Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-119952 Microsoft
12. 54
    News SecurityWeek 11h ago

    Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

    Exploited CVE-2026-124194 Microsoft
13. 58
    CVE NVD 11h ago

    Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-118207 Microsoft
14. 58
    CVE NVD 11h ago

    Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

    CVSS 7.5 CVE-2026-118148 Microsoft
15. 58
    CVE NVD 11h ago

    Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-118146 Microsoft
16. 51
    CVE NVD 11h ago

    Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.

    CVSS 8.1 CVE-2026-113862 Microsoft
17. 43
    CVE NVD 11h ago

    Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVSS 8.2 CVE-2026-113753 Microsoft
18. 36
    CVE NVD 11h ago

    Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.

    CVSS 7.5 CVE-2026-113752 Microsoft
19. 56
    CVE NVD 11h ago

    Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-112967 Microsoft
20. 48
    CVE NVD 11h ago

    Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    CVSS 8.8 CVE-2026-111309 Microsoft