NewsRapid7
Patch Tuesday - November 2026
Linked advisories
- CVE-2026-116928Windows Search Remote Code Execution Vulnerability
- CVE-2026-119952Microsoft Windows: beobachtbare Zeitabweichung (Seitenkanal)
- CVE-2026-124194Microsoft Outlook Spoofing Vulnerability
- CVE-2026-119952Windows Schannel Remote Code Execution Vulnerability
- CVE-2026-124194Microsoft 365 Apps for Enterprise: Spoofing
- CVE-2026-116928Microsoft Windows: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-116928Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-119952Microsoft Windows: beobachtbare Zeitabweichung (Seitenkanal)
- CVE-2026-124194Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-124194Microsoft Office — Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
- CVE-2026-124194Microsoft Releases November 2026 Security Updates
- CVE-2026-116928Microsoft Windows: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-119952Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.
Affected vendors and products
- Microsoft Microsoft 365 Apps for Enterprise
- Microsoft Microsoft 365 Apps For Enterprise
- Microsoft Microsoft Office Ltsc 2021
- Microsoft Microsoft Office Ltsc 2024
- Microsoft Office 2021
- Microsoft Microsoft Office LTSC 2024
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21h2
- Microsoft Windows 10 Version 22h2
- Microsoft Windows 11 Version 23h2
- Microsoft Windows 11 Version 24h2
More on Tuesday
Other advisories
Other news entries
- Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMDNewsSecurityWeek
- Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 HashesNewsThe Hacker News
- Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available PatchesNewsThe Hacker News
- Commvault rolls out an automated recovery mechanism, promising faster restoration of businessNewsCSO Online
- November 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentialsNewsCSO Online
- Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilitiesNewsCisco Talos
- November Patch Tuesday boasts over 1,000 bugs but only one zero-day so farNewsThe Register — Security
- November Patch Tuesday: An Overflowing Cornucopia of CVEsNewsDark Reading
Source: https://www.rapid7.com/blog/post/patch-tuesday-november-2026-em
ID