cve.bz

Microsoft Patch Tuesday, November 2026: the CVEs, page 8

Filter

Microsoft Patch Tuesday November 2026: the CVEs Microsoft published on 10 November 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Oct 2026, Sep 2026, Aug 2026, Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week

  1. 7.5CVE-2026-116929EPSS 0.7%

    Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network.

  2. 9.8CVE-2026-116928EPSS 1.2%

    Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

  3. 8.8CVE-2026-116927EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  4. 7.5CVE-2026-116926EPSS 1.1%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

  5. 8.8CVE-2026-116925EPSS 0.7%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  6. 8.8CVE-2026-116923EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  7. 6.5CVE-2026-116922EPSS 1.0%

    Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  8. 8.8CVE-2026-116722EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  9. 6.5CVE-2026-116721EPSS 1.0%

    Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  10. 8.8CVE-2026-116720EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  11. 8.8CVE-2026-116719EPSS 0.7%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  12. 7.5CVE-2026-116718EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  13. 8.8CVE-2026-116717EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  14. 7.8CVE-2026-116714EPSS 0.4%

    Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

  15. 8.1CVE-2026-116710EPSS 0.7%

    Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  16. 7.0CVE-2026-116707EPSS 0.3%

    Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally.

  17. 7.5CVE-2026-116706EPSS 0.4%

    Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.

  18. 6.6CVE-2026-116700EPSS 0.5%

    Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.

  19. 6.5CVE-2026-116699EPSS 0.9%

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  20. 7.5CVE-2026-116698EPSS 0.6%

    Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  21. 5.9CVE-2026-116697EPSS 1.0%

    Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.

  22. 8.8CVE-2026-114171EPSS 0.8%

    User interface (ui) misrepresentation of critical information in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  23. 7.8CVE-2026-114170EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  24. 8.8CVE-2026-114169EPSS 1.0%

    Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

  25. 7.8CVE-2026-114167EPSS 0.4%

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

  26. 5.5CVE-2026-114166EPSS 0.6%

    Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.

  27. 7.8CVE-2026-114165EPSS 0.5%

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

  28. 8.8CVE-2026-114164EPSS 0.9%

    Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

  29. 9.1CVE-2026-114162EPSS 0.9%

    Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.

  30. 7.8CVE-2026-114161EPSS 0.4%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized attacker to elevate privileges locally.

  31. 9.8CVE-2026-114160EPSS 0.9%

    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.

  32. 8.8CVE-2026-114159EPSS 0.9%

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

  33. 8.8CVE-2026-114158EPSS 0.9%

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

  34. 7.5CVE-2026-114157EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.

  35. 6.5CVE-2026-114156EPSS 0.6%

    Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

  36. 7.5CVE-2026-114155EPSS 0.3%

    Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.

  37. 7.5CVE-2026-114154EPSS 1.3%

    Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  38. 8.8CVE-2026-114152EPSS 0.9%

    Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

  39. 8.8CVE-2026-114151EPSS 1.5%

    Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.

  40. 5.9CVE-2026-114150EPSS 0.8%

    Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.

  41. 7.5CVE-2026-114149EPSS 1.3%

    Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  42. 7.5CVE-2026-114147EPSS 1.3%

    Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  43. 9.0CVE-2026-114146EPSS 0.8%

    Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

  44. 7.8CVE-2026-113865EPSS 0.3%

    Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  45. 6.4CVE-2026-113864EPSS 0.3%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  46. 8.8CVE-2026-113863EPSS 0.6%

    Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network.

  47. 8.1CVE-2026-113862EPSS 0.9%

    Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.

  48. 7.5CVE-2026-113861EPSS 0.3%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  49. 7.0CVE-2026-113860EPSS 0.3%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  50. 7.5CVE-2026-113859EPSS 0.4%

    Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

  51. 7.8CVE-2026-113856EPSS 0.3%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  52. 7.5CVE-2026-113855EPSS 0.4%

    Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.

  53. 7.8CVE-2026-113848EPSS 0.5%

    Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally.

  54. 7.8CVE-2026-113847EPSS 0.3%

    Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.

  55. 5.5CVE-2026-113844EPSS 0.4%

    Improper access control in Windows NTFS allows an authorized attacker to perform tampering locally.

  56. 7.8CVE-2026-113843EPSS 0.3%

    Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  57. 7.0CVE-2026-113842EPSS 0.3%

    Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

  58. 7.5CVE-2026-113825EPSS 0.6%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server Network Transport Driver (srvnet.sys) allows an authorized attacker to execute code over a network.

  59. 7.5CVE-2026-113823EPSS 1.3%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an unauthorized attacker to disclose information over a network.

  60. 6.5CVE-2026-113822EPSS 0.9%

    Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

  61. 4.1CVE-2026-113821EPSS 0.3%

    Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.

  62. 7.0CVE-2026-113820EPSS 0.3%

    Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

  63. 7.0CVE-2026-113819EPSS 0.3%

    Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  64. 6.5CVE-2026-113818EPSS 1.1%

    Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.

  65. 6.6CVE-2026-113817EPSS 0.5%

    Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.

  66. 4.1CVE-2026-113816EPSS 0.3%

    Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

  67. 4.7CVE-2026-113815EPSS 1.9%

    Improper control of generation of code ('code injection') in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

  68. 8.8CVE-2026-113814EPSS 0.8%

    Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

  69. 5.3CVE-2026-113773EPSS 0.6%

    Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.

  70. 4.7CVE-2026-113772EPSS 0.3%

    Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally.

  71. 5.5CVE-2026-113771EPSS 0.4%

    Off-by-one error in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  72. 7.0CVE-2026-113770EPSS 0.3%

    Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  73. 7.0CVE-2026-113769EPSS 0.3%

    Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

  74. 7.5CVE-2026-113768EPSS 0.6%

    Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.

  75. 7.8CVE-2026-113767EPSS 0.4%

    Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

  76. 3.3CVE-2026-113766EPSS 0.3%

    Weak authentication in Windows Language Experience Service allows an authorized attacker to perform tampering locally.

  77. 7.8CVE-2026-113765EPSS 0.4%

    Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.

  78. 4.7CVE-2026-113764EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to disclose information locally.

  79. 6.3CVE-2026-113763EPSS 0.2%

    Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.

  80. 7.0CVE-2026-113762EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  81. 7.0CVE-2026-113761EPSS 0.2%

    Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  82. 8.8CVE-2026-113760EPSS 0.3%

    Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.

  83. 7.8CVE-2026-113759EPSS 0.5%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  84. 7.8CVE-2026-113758EPSS 0.4%

    Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  85. 5.5CVE-2026-113757EPSS 0.5%

    Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.

  86. 5.3CVE-2026-113756EPSS 0.8%

    Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.

  87. 7.0CVE-2026-113755EPSS 0.3%

    Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.

  88. 4.7CVE-2026-113754EPSS 0.3%

    Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.

  89. 8.2CVE-2026-113753EPSS 0.4%

    Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  90. 7.5CVE-2026-113752EPSS 0.5%

    Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.

  91. 7.0CVE-2026-113751EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

  92. 7.0CVE-2026-113750EPSS 0.3%

    Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.

  93. 7.5CVE-2026-113749EPSS 0.8%

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

  94. 7.8CVE-2026-113748EPSS 0.3%

    Stack-based buffer overflow in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

  95. 4.7CVE-2026-112990EPSS 0.3%

    Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

  96. 7.0CVE-2026-112989EPSS 0.3%

    Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

  97. 5.5CVE-2026-112988EPSS 0.4%

    Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  98. 7.0CVE-2026-112987EPSS 0.3%

    Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

  99. 7.0CVE-2026-112986EPSS 0.2%

    No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  100. 7.5CVE-2026-112985EPSS 0.7%

    Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.