cve.bz

Microsoft Patch Tuesday, November 2026: the CVEs, page 3

Filter

Microsoft Patch Tuesday November 2026: the CVEs Microsoft published on 10 November 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Oct 2026, Sep 2026, Aug 2026, Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 5.5CVE-2026-94517EPSS 0.4%

    Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.

  2. 7.8CVE-2026-94515EPSS 0.3%

    Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

  3. 7.0CVE-2026-94514EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

  4. 8.0CVE-2026-94513EPSS 0.6%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  5. 8.8CVE-2026-94511EPSS 0.7%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  6. 7.8CVE-2026-94507EPSS 0.4%

    Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.

  7. 8.8CVE-2026-88249EPSS 0.6%

    Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network.

  8. 5.5CVE-2026-88247EPSS 0.5%

    Use of uninitialized resource in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.

  9. 7.8CVE-2026-88245EPSS 0.3%

    Missing authentication for critical function in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

  10. 7.5CVE-2026-88244EPSS 0.4%

    Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.

  11. 9.8CVE-2026-88243EPSS 1.0%

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  12. 7.0CVE-2026-88242EPSS 0.3%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2026-88241EPSS 0.3%

    Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  14. 8.0CVE-2026-88240EPSS 0.4%

    Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

  15. 7.8CVE-2026-88239EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2026-88238EPSS 0.4%

    Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

  17. 7.0CVE-2026-88237EPSS 0.2%

    Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  18. 7.5CVE-2026-88236EPSS 1.2%

    Null pointer dereference in Microsoft QUIC allows an unauthorized attacker to deny service over a network.

  19. 7.8CVE-2026-88235EPSS 0.3%

    Unintended proxy or intermediary ('confused deputy') in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

  20. 9.8CVE-2026-88234EPSS 0.9%

    Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.

  21. 7.8CVE-2026-88233EPSS 0.3%

    Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-88232EPSS 0.3%

    Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

  23. 5.7CVE-2026-88231EPSS 1.0%

    Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.

  24. 7.8CVE-2026-88230EPSS 0.5%

    Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

  25. 8.8CVE-2026-88229EPSS 0.7%

    Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

  26. 7.0CVE-2026-88228EPSS 0.2%

    Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

  27. 7.8CVE-2026-88227EPSS 0.3%

    Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-88224EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

  29. 8.8CVE-2026-88222EPSS 0.6%

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  30. 7.0CVE-2026-88221EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  31. 5.5CVE-2026-88220EPSS 0.4%

    Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.

  32. 9.8CVE-2026-88218EPSS 1.1%

    Double free in Windows DNS allows an unauthorized attacker to execute code over a network.

  33. 5.5CVE-2026-88217EPSS 0.4%

    Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

  34. 7.5CVE-2026-88216EPSS 0.5%

    Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.

  35. 6.4CVE-2026-88215EPSS 0.3%

    Use after free in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-88213EPSS 0.3%

    Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

  37. 7.5CVE-2026-88212EPSS 0.3%

    Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over an adjacent network.

  38. 5.7CVE-2026-88211EPSS 0.8%

    Out-of-bounds read in Graphic Fonts allows an authorized attacker to disclose information over a network.

  39. 8.0CVE-2026-88187EPSS 0.5%

    Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

  40. 8.8CVE-2026-88176EPSS 0.7%

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  41. 7.5CVE-2026-88111EPSS 0.5%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  42. 7.8CVE-2026-85942EPSS 0.2%

    Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2026-85929EPSS 0.3%

    Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

  44. 8.8CVE-2026-85923EPSS 0.7%

    Authorization bypass through user-controlled key in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.

  45. 4.4CVE-2026-85907EPSS 0.2%

    Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

  46. 7.0CVE-2026-85862EPSS 0.2%

    Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  47. 9.8CVE-2026-85844EPSS 1.0%

    Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.

  48. 8.8CVE-2026-85839EPSS 0.7%

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  49. 8.8CVE-2026-85838EPSS 0.7%

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  50. 7.8CVE-2026-85801EPSS 0.3%

    Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

  51. 7.5CVE-2026-84010EPSS 0.6%

    Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.

  52. 5.5CVE-2026-84005EPSS 0.4%

    Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

  53. 5.5CVE-2026-84004EPSS 0.4%

    Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

  54. 5.5CVE-2026-83953EPSS 0.8%

    Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.

  55. 7.0CVE-2026-83894EPSS 0.3%

    Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.

  56. 7.5CVE-2026-83684EPSS 1.0%

    Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

  57. 7.8CVE-2026-83563EPSS 0.5%

    Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

  58. 8.1CVE-2026-81384EPSS 0.7%

    Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

  59. 9.0CVE-2026-80095EPSS 0.8%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  60. 7.5CVE-2026-80094EPSS 0.5%

    Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

  61. 8.1CVE-2026-72998EPSS 0.7%

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  62. 7.5CVE-2026-70240EPSS 1.1%

    Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.

  63. 7.0CVE-2026-70231EPSS 0.3%

    Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

  64. 7.8CVE-2026-70182EPSS 0.3%

    Weak authentication in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  65. 7.0CVE-2026-70120EPSS 0.3%

    Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

  66. 8.8CVE-2026-70094EPSS 0.7%

    Untrusted search path in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  67. 8.7CVE-2026-70003EPSS 0.3%

    Improper verification of cryptographic signature in JDBC Driver for SQL Server allows an unauthorized attacker to bypass a security feature over a network.

  68. 7.5CVE-2026-69901EPSS 0.4%

    Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

  69. 7.0CVE-2026-69565EPSS 0.3%

    Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.

  70. 7.4CVE-2026-69327EPSS 0.3%

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.

  71. 6.5CVE-2026-68783EPSS 1.1%

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  72. 8.8CVE-2026-67646EPSS 1.0%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  73. 8.8CVE-2026-67637EPSS 0.8%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  74. 8.8CVE-2026-67632EPSS 0.9%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  75. 8.8CVE-2026-67391EPSS 0.9%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  76. 8.8CVE-2026-67387EPSS 1.0%

    Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

  77. 6.5CVE-2026-67382EPSS 1.1%

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  78. 8.8CVE-2026-67375EPSS 0.9%

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  79. 8.8CVE-2026-67374EPSS 0.8%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  80. 8.8CVE-2026-67372EPSS 0.8%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  81. 8.1CVE-2026-66813EPSS 0.7%

    Out-of-bounds read in SQL Server allows an unauthorized attacker to elevate privileges over a network.

  82. 9.8CVE-2026-66801EPSS 1.1%

    Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.

  83. 7.4CVE-2026-62903EPSS 0.6%

    Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.

  84. 7.8CVE-2026-125137EPSS 0.3%

    Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  85. 8.8CVE-2026-125136EPSS 0.5%

    Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network.

  86. 6.8CVE-2026-125135EPSS 0.3%

    Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.

  87. 7.5CVE-2026-125134EPSS 0.4%

    Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute code over an adjacent network.

  88. 6.5CVE-2026-124233EPSS 0.7%

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  89. 6.6CVE-2026-124229EPSS 1.9%

    Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.

  90. 8.8CVE-2026-124228EPSS 0.8%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.

  91. 7.5CVE-2026-124227EPSS 0.5%

    Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  92. 8.8CVE-2026-124226EPSS 0.3%

    Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

  93. 7.8CVE-2026-124225EPSS 0.4%

    Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.

  94. 7.0CVE-2026-124224EPSS 0.2%

    Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.

  95. 6.5CVE-2026-124210EPSS 0.6%

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  96. 6.5CVE-2026-124194KEVEPSS 1.6%

    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

  97. 8.8CVE-2026-124187EPSS 0.8%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  98. 7.5CVE-2026-124185EPSS 0.6%

    Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  99. 6.5CVE-2026-124183EPSS 0.9%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  100. 6.5CVE-2026-124179EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.