News

November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far

Microsoft admins wail and gnash their teeth

Read at The Register (security)

Vendor

Microsoft

Fix

available

• The Register (security) (theregister.com)
• CVE-2026-124194 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-116928 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-119958 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-112967 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 64
   Research Rapid7 4h ago

   Patch Tuesday - November 2026

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-119952CVE-2026-116928 Microsoft
2. 52
   KrebsOnSecurity Krebs 4h ago

   Microsoft Fixes Nearly 1,100 Security Vulnerabilities

   Fix available CVE-2026-124194CVE-2026-125350 Microsoft Google
3. 45
   News CyberScoop 4h ago

   Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday

   Fix available CVE-2026-124194CVE-2026-116928 Microsoft
4. 85
   Ivanti advisory Ivanti 4h ago

   November 2026 Patch Tuesday

   Exploited CVSS 6.5 EPSS 0.17 Fix available CVE-2026-109618CVE-2026-109619CVE-2026-111497+10 more Ivanti PHP
5. 34
   Qualys TRU Qualys 5h ago

   Microsoft Patch Tuesday, November 2026 Security Update Review

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft
6. 63
   CVE NVD 6h ago

   Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

   CVSS 9.8 CVE-2026-119958 Microsoft
7. 54
   News SecurityWeek 6h ago

   Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

   Exploited CVE-2026-124194 Microsoft
8. 63
   CVE NVD 6h ago

   Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

   CVSS 9.8 CVE-2026-116928 Microsoft
9. 56
   CVE NVD 6h ago

   Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

   CVSS 9.8 CVE-2026-112967 Microsoft
10. 47
    ISC diary SANS ISC 6h ago

    Microsoft Patch Tuesday November 2027

    Fix available CVE-2026-124194CVE-2026-119958CVE-2026-109459+57 more Microsoft Google
11. 62
    Tenable research Tenable 6h ago

    Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

    Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-118146CVE-2026-120002+17 more Microsoft
12. 62
    CISA alert CISA 13h ago

    CISA Adds Six Known Exploited Vulnerabilities to Catalog

    Exploited CVE-2026-20320CVE-2026-111560CVE-2026-111793+3 more Cisco Barracuda
13. 87
    KEV CISA KEV 25h ago

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

    KEV · due 24 Nov 2026 CVSS 6.5 Fix available CVE-2026-124194 Microsoft