cve.bz

Microsoft Patch Tuesday, November 2026: the CVEs, page 6

Filter

Microsoft Patch Tuesday November 2026: the CVEs Microsoft published on 10 November 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Oct 2026, Sep 2026, Aug 2026, Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week

  1. 7.0CVE-2026-119861EPSS 0.3%

    Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

  2. 7.0CVE-2026-119860EPSS 0.3%

    Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

  3. 7.0CVE-2026-119859EPSS 0.3%

    Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

  4. 7.5CVE-2026-119858EPSS 0.7%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  5. 5.5CVE-2026-119857EPSS 0.4%

    Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

  6. 5.5CVE-2026-119856EPSS 0.5%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.

  7. 5.5CVE-2026-119855EPSS 0.4%

    Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.

  8. 7.8CVE-2026-119853EPSS 0.5%

    Untrusted search path in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

  9. 6.7CVE-2026-119852EPSS 0.3%

    Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-119851EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2026-119849EPSS 0.3%

    Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

  12. 5.3CVE-2026-119848EPSS 0.8%

    Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.

  13. 7.8CVE-2026-119847EPSS 0.3%

    Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2026-119846EPSS 0.4%

    Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  15. 7.0CVE-2026-119844EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  16. 4.7CVE-2026-119841EPSS 0.3%

    Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

  17. 6.3CVE-2026-119840EPSS 0.3%

    Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  18. 8.8CVE-2026-119839EPSS 0.8%

    Untrusted search path in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.

  19. 4.7CVE-2026-119838EPSS 0.3%

    Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

  20. 7.5CVE-2026-119837EPSS 0.6%

    Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  21. 4.7CVE-2026-119836EPSS 0.4%

    Use after free in Windows Management Services allows an authorized attacker to disclose information locally.

  22. 7.0CVE-2026-119835EPSS 0.3%

    Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

  23. 7.8CVE-2026-119834EPSS 0.4%

    Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  24. 7.0CVE-2026-119833EPSS 0.3%

    Untrusted pointer dereference in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

  25. 5.9CVE-2026-119832EPSS 0.3%

    Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack.

  26. 7.0CVE-2026-119831EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  27. 6.8CVE-2026-119830EPSS 0.5%

    Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.

  28. 6.8CVE-2026-119829EPSS 0.4%

    Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

  29. 7.0CVE-2026-119827EPSS 0.3%

    Missing authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-119826EPSS 0.4%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  31. 5.5CVE-2026-119825EPSS 0.5%

    Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.

  32. 8.8CVE-2026-119824EPSS 0.8%

    Missing authentication for critical function in Remote Desktop Client allows an unauthorized attacker to perform tampering over a network.

  33. 6.8CVE-2026-119823EPSS 0.5%

    Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.

  34. 7.0CVE-2026-119822EPSS 0.4%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2026-119821EPSS 0.3%

    Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-119818EPSS 0.4%

    Incorrect authorization in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2026-119817EPSS 0.4%

    Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-119816EPSS 0.4%

    Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.

  39. 7.0CVE-2026-119405EPSS 0.3%

    Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

  40. 5.9CVE-2026-119404EPSS 0.7%

    Improper access control in Windows Client for NFS allows an unauthorized attacker to bypass a security feature over a network.

  41. 7.0CVE-2026-119403EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  42. 7.0CVE-2026-119402EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  43. 7.0CVE-2026-119401EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  44. 7.0CVE-2026-119399EPSS 0.2%

    Double free in Windows Installer allows an authorized attacker to elevate privileges locally.

  45. 7.8CVE-2026-119398EPSS 0.3%

    Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally.

  46. 7.0CVE-2026-119397EPSS 0.3%

    Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

  47. 6.5CVE-2026-119396EPSS 0.3%

    Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.

  48. 4.0CVE-2026-119395EPSS 0.4%

    Out-of-bounds read in Storport.sys Driver allows an authorized attacker to disclose information with a physical attack.

  49. 6.6CVE-2026-119394EPSS 0.5%

    Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.

  50. 7.8CVE-2026-119393EPSS 0.4%

    Stack-based buffer overflow in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

  51. 8.8CVE-2026-119392EPSS 0.9%

    Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.

  52. 7.8CVE-2026-119391EPSS 0.4%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  53. 7.8CVE-2026-119390EPSS 0.4%

    Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.

  54. 7.0CVE-2026-119389EPSS 0.4%

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

  55. 7.0CVE-2026-119388EPSS 0.3%

    Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

  56. 7.0CVE-2026-119387EPSS 0.3%

    Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

  57. 7.0CVE-2026-119386EPSS 0.3%

    Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

  58. 4.7CVE-2026-119385EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to deny service locally.

  59. 6.6CVE-2026-119383EPSS 0.4%

    Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.

  60. 7.8CVE-2026-119382EPSS 0.4%

    Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

  61. 7.5CVE-2026-118750EPSS 1.1%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  62. 7.5CVE-2026-118749EPSS 1.1%

    Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  63. 7.5CVE-2026-118748EPSS 1.1%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  64. 7.5CVE-2026-118747EPSS 1.3%

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

  65. 6.8CVE-2026-118746EPSS 0.7%

    Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.

  66. 8.8CVE-2026-118745EPSS 0.9%

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

  67. 8.6CVE-2026-118742EPSS 0.7%

    Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

  68. 8.1CVE-2026-118741EPSS 0.8%

    Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

  69. 9.1CVE-2026-118740EPSS 0.9%

    Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.

  70. 6.5CVE-2026-118739EPSS 0.7%

    Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

  71. 8.1CVE-2026-118737EPSS 0.7%

    Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network.

  72. 5.5CVE-2026-118736EPSS 0.4%

    Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.

  73. 7.5CVE-2026-118735EPSS 0.6%

    Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

  74. 8.8CVE-2026-118732EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  75. 8.8CVE-2026-118731EPSS 0.9%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  76. 8.8CVE-2026-118730EPSS 1.1%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  77. 8.8CVE-2026-118729EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  78. 6.5CVE-2026-118728EPSS 1.0%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  79. 6.5CVE-2026-118727EPSS 1.1%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  80. 8.8CVE-2026-118726EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  81. 8.8CVE-2026-118725EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.

  82. 8.8CVE-2026-118724EPSS 0.9%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  83. 7.8CVE-2026-118723EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  84. 8.8CVE-2026-118722EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  85. 8.8CVE-2026-118721EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  86. 8.8CVE-2026-118720EPSS 0.9%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  87. 8.8CVE-2026-118719EPSS 0.9%

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  88. 8.8CVE-2026-118718EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  89. 8.8CVE-2026-118717EPSS 0.9%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  90. 8.8CVE-2026-118716EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  91. 8.8CVE-2026-118715EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.

  92. 8.8CVE-2026-118714EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  93. 8.8CVE-2026-118713EPSS 1.1%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  94. 8.8CVE-2026-118712EPSS 0.9%

    Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  95. 8.8CVE-2026-118711EPSS 1.1%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  96. 8.8CVE-2026-118710EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  97. 8.8CVE-2026-118709EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  98. 8.8CVE-2026-118708EPSS 0.9%

    Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  99. 8.8CVE-2026-118707EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  100. 8.8CVE-2026-118706EPSS 0.9%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.