Research

Microsoft Patch Tuesday November 2027

Microsoft continues its AI-induced patch surge, addressing 1,260 different vulnerabilities this month. 68 of these vulnerabilities are considered critical. 167 of the vulnerabilities are Chromium issues affecting Microsoft Edge.

Read at SANS Internet Storm Center

Vendor

Microsoft, Google

Product

Microsoft Edge, Chromium / V8

EPSS

0.002 (p14)

Fix

available

Exposure class

Browser

• SANS Internet Storm Center (isc.sans.edu)
• CVE-2026-124194 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-119958 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-109459 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-119967 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-116710 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 34
   Qualys TRU Qualys 1h ago

   Microsoft Patch Tuesday, November 2026 Security Update Review

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft
2. 45
   CVE NVD 2h ago

   Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

   CVSS 8.1 CVE-2026-119967 Microsoft
3. 45
   CVE NVD 2h ago

   Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

   CVSS 8.1 CVE-2026-119964 Microsoft
4. 45
   CVE NVD 2h ago

   Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

   CVSS 8.1 CVE-2026-119963 Microsoft
5. 63
   CVE NVD 2h ago

   Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

   CVSS 9.8 CVE-2026-119958 Microsoft
6. 54
   News SecurityWeek 2h ago

   Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

   Exploited CVE-2026-124194 Microsoft
7. 45
   CVE NVD 2h ago

   Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

   CVSS 8.1 CVE-2026-116710 Microsoft
8. 45
   CVE NVD 2h ago

   Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

   CVSS 7.5 CVE-2026-113859 Microsoft
9. 42
   CVE NVD 2h ago

   Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

   CVSS 8.1 CVE-2026-109459 Microsoft
10. 62
    CISA alert CISA 10h ago

    CISA Adds Six Known Exploited Vulnerabilities to Catalog

    Exploited CVE-2026-20320CVE-2026-111560CVE-2026-111793+3 more Cisco Barracuda
11. 96
    KEV CISA KEV 22h ago

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

    KEV · due 24 Nov 2026 CVSS 6.5 Fix available CVE-2026-124194 Microsoft
12. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-118314: Incorrect reference resolution

    Fix available CVE-2026-118314 Microsoft Google
13. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-118309: Incorrect reference resolution

    Fix available CVE-2026-118309 Microsoft Google
14. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-118321: Use after free

    Fix available CVE-2026-118321 Microsoft Google
15. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119268: Integer overflow

    Fix available CVE-2026-119268 Microsoft Google
16. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119264: Memory corruption

    Fix available CVE-2026-119264 Microsoft Google
17. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119265: Memory corruption

    Fix available CVE-2026-119265 Microsoft Google
18. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119266: Use after free

    Fix available CVE-2026-119266 Microsoft Google
19. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119267: Memory corruption

    Fix available CVE-2026-119267 Microsoft Google
20. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119260: Use after free

    Fix available CVE-2026-119260 Microsoft Google