News

November Patch Tuesday boasts over 1,000 bugs, one already under attack

Microsoft admins wail and gnash their teeth

Read at The Register (security)

Vendor

Microsoft

Exploitation

observed in the wild

Fix

available

• The Register (security) (theregister.com)
• CVE-2026-124194 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-116928 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-119958 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-112967 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 59
   Malwarebytes Labs Malwarebytes 17h ago

   Microsoft Patch Tuesday fixes Outlook flaw already under attack

   Exploited Fix available CVE-2026-116928CVE-2026-124194 Microsoft
2. 38
   Talos research Talos 27h ago

   Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

   Fix available CVE-2026-124194CVE-2026-113862CVE-2026-118146+57 more Microsoft Cisco
3. 25
   News The Register 30h ago

   November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far

   Fix available CVE-2026-124194CVE-2026-116928CVE-2026-119958+1 more Microsoft
4. 55
   Research Rapid7 31h ago

   Patch Tuesday - November 2026

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-119952CVE-2026-116928 Microsoft
5. 55
   Research Rapid7 31h ago

   Patch Tuesday - November 2026

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-119952CVE-2026-116928 Microsoft
6. 43
   KrebsOnSecurity Krebs 31h ago

   Microsoft Fixes Nearly 1,100 Security Vulnerabilities

   Fix available CVE-2026-124194CVE-2026-125350 Microsoft Google
7. 36
   News CyberScoop 31h ago

   Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday

   Fix available CVE-2026-124194CVE-2026-116928 Microsoft
8. 85
   Ivanti advisory Ivanti 31h ago

   November 2026 Patch Tuesday

   Exploited CVSS 6.5 EPSS 0.83 Fix available CVE-2026-109618CVE-2026-109619CVE-2026-111497+10 more Ivanti PHP
9. 25
   Qualys TRU Qualys 32h ago

   Microsoft and Adobe Patch Tuesday, November 2026 Security Update Review

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft Adobe
10. 54
    CVE NVD 34h ago

    Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-119958 Microsoft
11. 45
    News SecurityWeek 34h ago

    Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

    Exploited CVE-2026-124194 Microsoft
12. 54
    CVE NVD 34h ago

    Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-116928 Microsoft
13. 47
    CVE NVD 34h ago

    Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-112967 Microsoft
14. 38
    ISC diary SANS ISC 34h ago

    Microsoft Patch Tuesday November 2026

    Fix available CVE-2026-124194CVE-2026-119958CVE-2026-109459+57 more Microsoft Google
15. 70
    Research ZDI 34h ago

    The November 2026 Security Update Review

    Exploited CVSS 10.0 Fix available CVE-2026-124194CVE-2026-116928CVE-2026-119958+57 more Microsoft Adobe
16. 53
    Tenable research Tenable 34h ago

    Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

    Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-118146CVE-2026-120002+17 more Microsoft
17. 53
    CISA alert CISA 41h ago

    CISA Adds Six Known Exploited Vulnerabilities to Catalog

    Exploited CVE-2026-20320CVE-2026-111560CVE-2026-111793+3 more Cisco Barracuda
18. 87
    KEV CISA KEV 2d ago

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

    KEV · due 24 Nov 2026 CVSS 6.5 Fix available CVE-2026-124194 Microsoft