Today’s Patch Tuesday Alert addresses Microsoft’s November 2026 Security Updates. The FIRE team is actively working on coverage for these vulnerabilities and expect to ship that coverage as soon as it is completed.
In-the-Wild & Disclosed CVEs
A vulnerability in Microsoft Outlook could allow an attacker to send a malicious file to a victim that, if opened, could disclose NTLMv2 hashes to the attacker. These hashes could then be used to authenticate as the victim and impersonate them. Microsoft has reported this vulnerability as Exploitation Detected.
CVE Breakdown by Tag
While historical Microsoft Security Bulletin groupings are gone, Microsoft vulnerabilities are tagged with an identifier. This list provides a breakdown of the CVEs on a per tag basis. Vulnerabilities are also color coded to aid with identifying key issues.
- Traditional Software
- Mobile Software
- Cloud or Cloud Adjacent
- Vulnerabilities that are being exploited or that have been disclosed will be highlighted
| Tag | CVE Count | CVEs |
|---|---|---|
| HEIF Image Extensions | 1 | CVE-2026-100204 |
| Windows NTFS | 7 | CVE-2026-100223, CVE-2026-102200, CVE-2026-105542, CVE-2026-113844, CVE-2026-113848, CVE-2026-119900, CVE-2026-119933 |
| Windows Modern Device Management (MDM) | 5 | CVE-2026-102219, CVE-2026-112987, CVE-2026-113820, CVE-2026-119945, CVE-2026-96184 |
| Azure CycleCloud | 4 | CVE-2026-102224, CVE-2026-113822, CVE-2026-113823, CVE-2026-114161 |
| Visual Studio Code | 18 | CVE-2026-102230, CVE-2026-102236, CVE-2026-114171, CVE-2026-119975, CVE-2026-119981, CVE-2026-119982, CVE-2026-119983, CVE-2026-119985, CVE-2026-120779, CVE-2026-120780, CVE-2026-120782, CVE-2026-121660, CVE-2026-121661, CVE-2026-121662, CVE-2026-121663, CVE-2026-121664, CVE-2026-121665, CVE-2026-70094 |
| Windows Shell | 5 | CVE-2026-102868, CVE-2026-105506, CVE-2026-119817, CVE-2026-119938, CVE-2026-97013 |
| Windows CNG Key Isolation Service | 1 | CVE-2026-103571 |
| Windows Volume Shadow Copy | 2 | CVE-2026-105017, CVE-2026-119941 |
| Windows Partition Management Driver | 1 | CVE-2026-105018 |
| Windows Advanced Rasterization Platform | 37 | CVE-2026-105020, CVE-2026-105021, CVE-2026-105022, CVE-2026-105023, CVE-2026-105025, CVE-2026-105026, CVE-2026-105490, CVE-2026-105491, CVE-2026-105493, CVE-2026-105495, CVE-2026-105496, CVE-2026-105497, CVE-2026-105498, CVE-2026-105499, CVE-2026-118214, CVE-2026-118215, CVE-2026-118216, CVE-2026-118217, CVE-2026-118218, CVE-2026-118219, CVE-2026-118221, CVE-2026-118222, CVE-2026-118223, CVE-2026-118224, CVE-2026-118225, CVE-2026-118226, CVE-2026-118227, CVE-2026-118228, CVE-2026-118229, CVE-2026-118232, CVE-2026-118277, CVE-2026-118278, CVE-2026-118279, CVE-2026-118280, CVE-2026-118283, CVE-2026-94515, CVE-2026-95960 |
| Windows Storage Spaces Controller | 6 | CVE-2026-105024, CVE-2026-113814, CVE-2026-119392, CVE-2026-119851, CVE-2026-119908, CVE-2026-122475 |
| Windows Win32K | 8 | CVE-2026-105028, CVE-2026-119825, CVE-2026-119827, CVE-2026-119856, CVE-2026-119899, CVE-2026-119910, CVE-2026-122170, CVE-2026-95893 |
| Microsoft Remote Registry Service | 1 | CVE-2026-105492 |
| Azure NFS mount helper (aznfs) | 1 | CVE-2026-105494 |
| Windows Installer | 36 | CVE-2026-105501, CVE-2026-105507, CVE-2026-105532, CVE-2026-105543, CVE-2026-105545, CVE-2026-112789, CVE-2026-113847, CVE-2026-119398, CVE-2026-119399, CVE-2026-119831, CVE-2026-119838, CVE-2026-119852, CVE-2026-119865, CVE-2026-119867, CVE-2026-119887, CVE-2026-119892, CVE-2026-119903, CVE-2026-119929, CVE-2026-95951, CVE-2026-96004, CVE-2026-96008, CVE-2026-96019, CVE-2026-96026, CVE-2026-96027, CVE-2026-96028, CVE-2026-96029, CVE-2026-96035, CVE-2026-96036, CVE-2026-96046, CVE-2026-96047, CVE-2026-96060, CVE-2026-96061, CVE-2026-96062, CVE-2026-96073, CVE-2026-96085, CVE-2026-96152 |
| Windows Management Instrumentation | 8 | CVE-2026-105503, CVE-2026-105524, CVE-2026-105546, CVE-2026-105580, CVE-2026-108410, CVE-2026-112814, CVE-2026-112965, CVE-2026-95920 |
| Windows Kernel | 28 | CVE-2026-105504, CVE-2026-105513, CVE-2026-105552, CVE-2026-105566, CVE-2026-108403, CVE-2026-109473, CVE-2026-112790, CVE-2026-112802, CVE-2026-112805, CVE-2026-112969, CVE-2026-112973, CVE-2026-114170, CVE-2026-118143, CVE-2026-119857, CVE-2026-119868, CVE-2026-119884, CVE-2026-119912, CVE-2026-119918, CVE-2026-119935, CVE-2026-119965, CVE-2026-122183, CVE-2026-94514, CVE-2026-95905, CVE-2026-95988, CVE-2026-96031, CVE-2026-96052, CVE-2026-96058, CVE-2026-96129 |
| Microsoft Input Method Editor (IME) | 1 | CVE-2026-105505 |
| Windows Resilient File System (ReFS) | 2 | CVE-2026-105509, CVE-2026-119386 |
| Windows Secure Socket Tunneling Protocol (SSTP) | 2 | CVE-2026-105510, CVE-2026-105561 |
| Windows Point-to-Point Protocol over Ethernet (PPPoE) | 2 | CVE-2026-105511, CVE-2026-118123 |
| Microsoft QUIC | 2 | CVE-2026-105512, CVE-2026-88236 |
| Windows Message Queuing | 8 | CVE-2026-105515, CVE-2026-116710, CVE-2026-118125, CVE-2026-118126, CVE-2026-119833, CVE-2026-119848, CVE-2026-119963, CVE-2026-119964 |
| Windows iSCSI | 5 | CVE-2026-105518, CVE-2026-122177, CVE-2026-88231, CVE-2026-88234, CVE-2026-95898 |
| Windows DNS | 22 | CVE-2026-105520, CVE-2026-105579, CVE-2026-108425, CVE-2026-109463, CVE-2026-113855, CVE-2026-119905, CVE-2026-119953, CVE-2026-119970, CVE-2026-119971, CVE-2026-88218, CVE-2026-96176, CVE-2026-96970, CVE-2026-96972, CVE-2026-96976, CVE-2026-96980, CVE-2026-96983, CVE-2026-96984, CVE-2026-96985, CVE-2026-96986, CVE-2026-96987, CVE-2026-96988, CVE-2026-97006 |
| Winlogon | 2 | CVE-2026-105522, CVE-2026-83563 |
| Windows Network Connection Broker | 3 | CVE-2026-105525, CVE-2026-108406, CVE-2026-119821 |
| Winsock | 2 | CVE-2026-105526, CVE-2026-96994 |
| Windows Encrypting File System (EFS) | 2 | CVE-2026-105527, CVE-2026-96973 |
| Desktop Window Manager | 9 | CVE-2026-105528, CVE-2026-105581, CVE-2026-112988, CVE-2026-113758, CVE-2026-113819, CVE-2026-96103, CVE-2026-96172, CVE-2026-96174, CVE-2026-96175 |
| Windows Storage | 4 | CVE-2026-105529, CVE-2026-105534, CVE-2026-119389, CVE-2026-95889 |
| Windows System Events Broker | 1 | CVE-2026-105530 |
| Windows Print Spooler Components | 20 | CVE-2026-105531, CVE-2026-105567, CVE-2026-112752, CVE-2026-112762, CVE-2026-112765, CVE-2026-112791, CVE-2026-112792, CVE-2026-112797, CVE-2026-112806, CVE-2026-112808, CVE-2026-112811, CVE-2026-112976, CVE-2026-112978, CVE-2026-112980, CVE-2026-112981, CVE-2026-113752, CVE-2026-113770, CVE-2026-119913, CVE-2026-119939, CVE-2026-119950 |
| Windows COM | 3 | CVE-2026-105533, CVE-2026-112968, CVE-2026-94531 |
| Mailslot File System | 1 | CVE-2026-105537 |
| Windows Error Reporting | 5 | CVE-2026-105540, CVE-2026-85862, CVE-2026-94525, CVE-2026-95947, CVE-2026-96153 |
| Windows Audio Service | 8 | CVE-2026-105541, CVE-2026-119888, CVE-2026-119893, CVE-2026-119894, CVE-2026-119895, CVE-2026-121671, CVE-2026-96038, CVE-2026-96155 |
| .NET | 6 | CVE-2026-105544, CVE-2026-109475, CVE-2026-114155, CVE-2026-118746, CVE-2026-118747, CVE-2026-120796 |
| Windows Setup and Deployment | 2 | CVE-2026-105547, CVE-2026-119914 |
| Windows Smart Card | 6 | CVE-2026-105549, CVE-2026-112794, CVE-2026-118144, CVE-2026-119383, CVE-2026-119835, CVE-2026-95968 |
| Windows NetBIOS | 4 | CVE-2026-105551, CVE-2026-112798, CVE-2026-119873, CVE-2026-96971 |
| Windows Filtering Platform (WFP) | 3 | CVE-2026-105553, CVE-2026-112756, CVE-2026-88215 |
| Windows Background Intelligent Transfer Service (BITS) | 1 | CVE-2026-105554 |
| Windows DHCP Server | 9 | CVE-2026-105557, CVE-2026-105560, CVE-2026-105588, CVE-2026-113773, CVE-2026-119890, CVE-2026-72998, CVE-2026-88216, CVE-2026-88243, CVE-2026-96134 |
| Windows Deployment Services | 5 | CVE-2026-105558, CVE-2026-112977, CVE-2026-113818, CVE-2026-118213, CVE-2026-119951 |
| Windows Active Directory | 3 | CVE-2026-105559, CVE-2026-119948, CVE-2026-123387 |
| Windows Container Manager Service | 1 | CVE-2026-105562 |
| Windows MIDI Service Module | 3 | CVE-2026-105565, CVE-2026-105574, CVE-2026-119901 |
| Active Directory Domain Services | 4 | CVE-2026-105568, CVE-2026-118146, CVE-2026-118148, CVE-2026-118735 |
| Windows Cloud Files Mini Filter Driver | 5 | CVE-2026-105569, CVE-2026-112763, CVE-2026-112803, CVE-2026-112810, CVE-2026-119974 |
| Windows DWM Core Library | 4 | CVE-2026-105575, CVE-2026-105582, CVE-2026-105583, CVE-2026-112986 |
| Microsoft JScript | 2 | CVE-2026-105578, CVE-2026-112985 |
| Windows Inventory Backup | 1 | CVE-2026-105584 |
| Microsoft Windows SCSI Class System File | 2 | CVE-2026-105586, CVE-2026-113821 |
| Windows OLE DB | 1 | CVE-2026-105587 |
| Windows Wireless Networking | 1 | CVE-2026-105589 |
| Windows Active Directory Certificate Services | 2 | CVE-2026-105590, CVE-2026-95884 |
| Azure Local | 1 | CVE-2026-105734 |
| Windows Remote Desktop Services | 4 | CVE-2026-108401, CVE-2026-119882, CVE-2026-119957, CVE-2026-122166 |
| Windows Layer-2 Bridge Network Driver | 1 | CVE-2026-108402 |
| Windows CD-ROM Driver | 2 | CVE-2026-108404, CVE-2026-108405 |
| Windows GDI | 3 | CVE-2026-108407, CVE-2026-108424, CVE-2026-94527 |
| Windows Telephony Service | 4 | CVE-2026-108408, CVE-2026-108413, CVE-2026-116700, CVE-2026-119886 |
| Windows Overlay Filter | 6 | CVE-2026-108409, CVE-2026-112750, CVE-2026-112760, CVE-2026-112813, CVE-2026-119822, CVE-2026-121670 |
| Windows ODBC Driver | 1 | CVE-2026-108411 |
| Windows Redirected Drive Buffering | 2 | CVE-2026-108412, CVE-2026-113772 |
| Windows Projected File System Filter Driver | 1 | CVE-2026-108414 |
| Windows File Server Resource Management Service | 4 | CVE-2026-108415, CVE-2026-108416, CVE-2026-108421, CVE-2026-113765 |
| Remote Desktop Client | 12 | CVE-2026-108417, CVE-2026-108418, CVE-2026-108419, CVE-2026-119390, CVE-2026-119824, CVE-2026-119839, CVE-2026-119858, CVE-2026-119934, CVE-2026-121677, CVE-2026-121678, CVE-2026-95908, CVE-2026-95964 |
| Windows WinHTTP | 1 | CVE-2026-108423 |
| Microsoft Authentication Library for JavaScript | 1 | CVE-2026-108469 |
| Microsoft Authentication Library (MSAL) for Node.js | 1 | CVE-2026-108470 |
| Microsoft Office SharePoint | 27 | CVE-2026-109454, CVE-2026-109455, CVE-2026-109456, CVE-2026-109464, CVE-2026-109466, CVE-2026-109472, CVE-2026-109495, CVE-2026-109497, CVE-2026-109499, CVE-2026-109502, CVE-2026-109504, CVE-2026-110044, CVE-2026-110045, CVE-2026-110057, CVE-2026-110065, CVE-2026-111296, CVE-2026-111297, CVE-2026-111300, CVE-2026-111303, CVE-2026-112736, CVE-2026-120000, CVE-2026-120002, CVE-2026-123390, CVE-2026-123391, CVE-2026-124210, CVE-2026-80095, CVE-2026-88176 |
| Azure CLI | 1 | CVE-2026-109457 |
| Windows Message Queuing Queue Manager | 2 | CVE-2026-109459, CVE-2026-119967 |
| Microsoft Entra Private Network Connector | 1 | CVE-2026-109460 |
| Azure Firmware | 1 | CVE-2026-109462 |
| Azure DevOps | 1 | CVE-2026-109467 |
| ASP.NET Core | 14 | CVE-2026-109476, CVE-2026-109478, CVE-2026-109481, CVE-2026-114146, CVE-2026-114147, CVE-2026-114149, CVE-2026-114150, CVE-2026-114154, CVE-2026-114156, CVE-2026-114157, CVE-2026-118741, CVE-2026-118748, CVE-2026-118749, CVE-2026-118750 |
| Microsoft 365 Agents SDK | 1 | CVE-2026-109485 |
| Microsoft Office PowerPoint | 7 | CVE-2026-109487, CVE-2026-112734, CVE-2026-112737, CVE-2026-112738, CVE-2026-116922, CVE-2026-120001, CVE-2026-120005 |
| Microsoft Office Word | 65 | CVE-2026-109491, CVE-2026-109500, CVE-2026-109501, CVE-2026-109503, CVE-2026-109505, CVE-2026-110046, CVE-2026-110047, CVE-2026-110048, CVE-2026-110049, CVE-2026-110050, CVE-2026-110051, CVE-2026-110052, CVE-2026-110053, CVE-2026-110054, CVE-2026-110055, CVE-2026-110056, CVE-2026-110061, CVE-2026-110062, CVE-2026-110064, CVE-2026-110066, CVE-2026-110067, CVE-2026-111285, CVE-2026-111287, CVE-2026-111288, CVE-2026-111290, CVE-2026-111294, CVE-2026-111295, CVE-2026-111298, CVE-2026-111299, CVE-2026-111302, CVE-2026-111304, CVE-2026-111306, CVE-2026-111307, CVE-2026-111308, CVE-2026-111310, CVE-2026-112714, CVE-2026-112715, CVE-2026-112716, CVE-2026-112717, CVE-2026-112718, CVE-2026-112719, CVE-2026-112720, CVE-2026-112721, CVE-2026-112722, CVE-2026-112723, CVE-2026-112724, CVE-2026-112726, CVE-2026-112728, CVE-2026-112729, CVE-2026-112730, CVE-2026-112733, CVE-2026-112735, CVE-2026-112739, CVE-2026-112741, CVE-2026-113759, CVE-2026-116718, CVE-2026-116719, CVE-2026-116720, CVE-2026-116721, CVE-2026-116722, CVE-2026-116923, CVE-2026-116925, CVE-2026-123394, CVE-2026-124185, CVE-2026-124233 |
| Microsoft MCP Gateway | 1 | CVE-2026-109492 |
| Microsoft Office Access | 7 | CVE-2026-109493, CVE-2026-109498, CVE-2026-110058, CVE-2026-110059, CVE-2026-110060, CVE-2026-111301, CVE-2026-111305 |
| Microsoft Office Visio | 2 | CVE-2026-109494, CVE-2026-109496 |
| Microsoft Office Outlook | 20 | CVE-2026-110043, CVE-2026-110068, CVE-2026-111309, CVE-2026-119993, CVE-2026-119995, CVE-2026-119996, CVE-2026-119997, CVE-2026-123375, CVE-2026-123376, CVE-2026-123377, CVE-2026-123378, CVE-2026-123379, CVE-2026-123380, CVE-2026-123381, CVE-2026-123382, CVE-2026-123383, CVE-2026-123384, CVE-2026-124194, CVE-2026-124227, CVE-2026-124228 |
| Microsoft Office | 9 | CVE-2026-111286, CVE-2026-111289, CVE-2026-111291, CVE-2026-111293, CVE-2026-112731, CVE-2026-116717, CVE-2026-119998, CVE-2026-120003, CVE-2026-122198 |
| Microsoft Office Excel | 64 | CVE-2026-111292, CVE-2026-116927, CVE-2026-118292, CVE-2026-118293, CVE-2026-118294, CVE-2026-118295, CVE-2026-118296, CVE-2026-118297, CVE-2026-118298, CVE-2026-118299, CVE-2026-118300, CVE-2026-118301, CVE-2026-118302, CVE-2026-118700, CVE-2026-118701, CVE-2026-118702, CVE-2026-118703, CVE-2026-118704, CVE-2026-118705, CVE-2026-118706, CVE-2026-118707, CVE-2026-118708, CVE-2026-118709, CVE-2026-118710, CVE-2026-118711, CVE-2026-118712, CVE-2026-118713, CVE-2026-118714, CVE-2026-118715, CVE-2026-118716, CVE-2026-118717, CVE-2026-118718, CVE-2026-118719, CVE-2026-118720, CVE-2026-118721, CVE-2026-118722, CVE-2026-118723, CVE-2026-118724, CVE-2026-118725, CVE-2026-118726, CVE-2026-118727, CVE-2026-118728, CVE-2026-118729, CVE-2026-118730, CVE-2026-118731, CVE-2026-118732, CVE-2026-119986, CVE-2026-119999, CVE-2026-120785, CVE-2026-120786, CVE-2026-120788, CVE-2026-120789, CVE-2026-120790, CVE-2026-120791, CVE-2026-123385, CVE-2026-123395, CVE-2026-124170, CVE-2026-124174, CVE-2026-124176, CVE-2026-124178, CVE-2026-124179, CVE-2026-124183, CVE-2026-124187, CVE-2026-124229 |
| Role: DNS Server | 11 | CVE-2026-112727, CVE-2026-81384, CVE-2026-96002, CVE-2026-96017, CVE-2026-96020, CVE-2026-96064, CVE-2026-96092, CVE-2026-96112, CVE-2026-96177, CVE-2026-96179, CVE-2026-96975 |
| Windows Device Association Service | 4 | CVE-2026-112743, CVE-2026-119844, CVE-2026-119866, CVE-2026-119874 |
| Azure DevOps Server | 3 | CVE-2026-112745, CVE-2026-120783, CVE-2026-85923 |
| Windows Remote Assistance | 1 | CVE-2026-112751 |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | 3 | CVE-2026-112753, CVE-2026-113761, CVE-2026-113771 |
| Microsoft Graphics Component | 1 | CVE-2026-112754 |
| Windows RNDIS | 1 | CVE-2026-112755 |
| Windows Secure Kernel Mode | 1 | CVE-2026-112757 |
| Windows Defender Firewall Service | 1 | CVE-2026-112758 |
| Windows Task Scheduler | 6 | CVE-2026-112759, CVE-2026-122174, CVE-2026-88233, CVE-2026-95894, CVE-2026-96053, CVE-2026-96845 |
| Windows Broadcast DVR User Service | 8 | CVE-2026-112761, CVE-2026-113762, CVE-2026-119401, CVE-2026-119402, CVE-2026-119403, CVE-2026-88221, CVE-2026-94529, CVE-2026-95871 |
| Windows USB Driver | 9 | CVE-2026-112764, CVE-2026-119872, CVE-2026-122167, CVE-2026-95872, CVE-2026-96005, CVE-2026-96051, CVE-2026-96055, CVE-2026-96056, CVE-2026-96057 |
| Windows exFAT File System | 2 | CVE-2026-112766, CVE-2026-112804 |
| Windows Event Collector Service | 2 | CVE-2026-112793, CVE-2026-112796 |
| Windows Security Account Manager | 3 | CVE-2026-112795, CVE-2026-112966, CVE-2026-122474 |
| Windows Projected File System | 2 | CVE-2026-112799, CVE-2026-113764 |
| Windows Diagnostic Policy Service | 3 | CVE-2026-112800, CVE-2026-95934, CVE-2026-95976 |
| Windows eSCL Scanner | 2 | CVE-2026-112801, CVE-2026-95956 |
| Microsoft Local Security Authority Server (lsasrv) | 1 | CVE-2026-112807 |
| Windows Composite Image File System | 1 | CVE-2026-112809 |
| Windows SMB Client | 4 | CVE-2026-112812, CVE-2026-112970, CVE-2026-112971, CVE-2026-119870 |
| Windows Xbox Live Networking Service | 1 | CVE-2026-112967 |
| Windows SMB Server | 1 | CVE-2026-112972 |
| Microsoft Account | 2 | CVE-2026-112974, CVE-2026-112982 |
| Windows Link-Layer Discovery Protocol (LLDP) | 2 | CVE-2026-112975, CVE-2026-113816 |
| Windows State Repository Service | 1 | CVE-2026-112979 |
| Windows USB Video Driver | 4 | CVE-2026-112984, CVE-2026-112990, CVE-2026-95961, CVE-2026-95965 |
| Servicing Stack Updates | 2 | CVE-2026-112989, CVE-2026-88235 |
| Software Protection Platform (SPP) | 1 | CVE-2026-113748 |
| Microsoft Windows Codecs Library | 5 | CVE-2026-113749, CVE-2026-114164, CVE-2026-114165, CVE-2026-114167, CVE-2026-96150 |
| Windows Device Inventory | 1 | CVE-2026-113750 |
| Windows Fast FAT Driver | 1 | CVE-2026-113751 |
| Windows Hyper-V | 16 | CVE-2026-113753, CVE-2026-113856, CVE-2026-113860, CVE-2026-113861, CVE-2026-113864, CVE-2026-113865, CVE-2026-119385, CVE-2026-119391, CVE-2026-119826, CVE-2026-119947, CVE-2026-119955, CVE-2026-119959, CVE-2026-119960, CVE-2026-95910, CVE-2026-95913, CVE-2026-96965 |
| Windows FileCrypt Driver | 3 | CVE-2026-113754, CVE-2026-113756, CVE-2026-113757 |
| Windows Filter Manager | 2 | CVE-2026-113755, CVE-2026-121673 |
| Windows XWizard Framework | 1 | CVE-2026-113760 |
| Windows DPAPI (Data Protection Application Programming Interface) | 1 | CVE-2026-113763 |
| Windows Language Experience Service | 1 | CVE-2026-113766 |
| Windows COM+ Event System Service | 3 | CVE-2026-113767, CVE-2026-113769, CVE-2026-119855 |
| Windows Performance Counters | 3 | CVE-2026-113768, CVE-2026-88220, CVE-2026-95975 |
| Windows PowerShell | 4 | CVE-2026-113815, CVE-2026-124224, CVE-2026-124225, CVE-2026-124226 |
| Windows Devices Human Interface | 1 | CVE-2026-113817 |
| Windows SMB Server Network Transport Driver (srvnet.sys) | 1 | CVE-2026-113825 |
| Windows Security Center | 1 | CVE-2026-113842 |
| Windows Remote Access Connection Manager | 1 | CVE-2026-113843 |
| Windows TCP/IP | 4 | CVE-2026-113859, CVE-2026-96077, CVE-2026-96102, CVE-2026-96969 |
| Windows Network Address Translation (NAT) | 2 | CVE-2026-113862, CVE-2026-88212 |
| Windows DHCP Client | 4 | CVE-2026-113863, CVE-2026-118739, CVE-2026-88240, CVE-2026-96115 |
| Visual Studio | 5 | CVE-2026-114151, CVE-2026-114152, CVE-2026-114158, CVE-2026-114159, CVE-2026-118745 |
| Azure Managed Grafana | 1 | CVE-2026-114160 |
| Microsoft Graph | 1 | CVE-2026-114162 |
| Windows Raw Image Extension | 2 | CVE-2026-114166, CVE-2026-114169 |
| Reliable Multicast Transport Driver (RMCAST) | 1 | CVE-2026-116697 |
| Microsoft WDAC OLE DB provider for SQL | 5 | CVE-2026-116698, CVE-2026-116699, CVE-2026-85838, CVE-2026-85839, CVE-2026-88222 |
| Windows Link Layer Topology Discovery Protocol | 3 | CVE-2026-116706, CVE-2026-116707, CVE-2026-88244 |
| Windows AppX Deployment Service | 2 | CVE-2026-116714, CVE-2026-88224 |
| Microsoft Teams | 1 | CVE-2026-116926 |
| Microsoft Windows Search Component | 3 | CVE-2026-116928, CVE-2026-119943, CVE-2026-119954 |
| SQL Server | 53 | CVE-2026-116929, CVE-2026-116930, CVE-2026-116931, CVE-2026-116932, CVE-2026-116933, CVE-2026-116934, CVE-2026-116935, CVE-2026-116936, CVE-2026-116937, CVE-2026-116938, CVE-2026-116939, CVE-2026-116940, CVE-2026-116941, CVE-2026-116942, CVE-2026-116943, CVE-2026-116944, CVE-2026-116945, CVE-2026-116946, CVE-2026-116947, CVE-2026-118102, CVE-2026-118103, CVE-2026-118104, CVE-2026-118105, CVE-2026-118106, CVE-2026-118108, CVE-2026-118109, CVE-2026-118110, CVE-2026-118111, CVE-2026-118112, CVE-2026-118113, CVE-2026-118114, CVE-2026-118115, CVE-2026-118116, CVE-2026-118117, CVE-2026-118118, CVE-2026-118119, CVE-2026-118120, CVE-2026-62903, CVE-2026-66813, CVE-2026-67372, CVE-2026-67374, CVE-2026-67375, CVE-2026-67382, CVE-2026-67387, CVE-2026-67391, CVE-2026-67632, CVE-2026-67637, CVE-2026-67646, CVE-2026-68783, CVE-2026-84010, CVE-2026-88111, CVE-2026-94511, CVE-2026-94513 |
| Windows Internet Connection Sharing (ICS) | 5 | CVE-2026-118124, CVE-2026-119859, CVE-2026-119860, CVE-2026-119861, CVE-2026-122179 |
| Windows FTP Service | 1 | CVE-2026-118137 |
| Windows Client for NFS | 6 | CVE-2026-118138, CVE-2026-118141, CVE-2026-119404, CVE-2026-122165, CVE-2026-88249, CVE-2026-95885 |
| Windows Server for NFS | 1 | CVE-2026-118140 |
| Windows Distributed File System (DFS) | 1 | CVE-2026-118142 |
| Windows Function Discovery SSDP Provider | 1 | CVE-2026-118145 |
| Microsoft Exchange Server | 9 | CVE-2026-118149, CVE-2026-118150, CVE-2026-118151, CVE-2026-118152, CVE-2026-118153, CVE-2026-118154, CVE-2026-118157, CVE-2026-118207, CVE-2026-118208 |
| Windows Multiple Provider Router | 1 | CVE-2026-118220 |
| Azure File Sync | 1 | CVE-2026-118288 |
| Windows Network File System | 1 | CVE-2026-118736 |
| Windows Remote Procedure Call Runtime | 1 | CVE-2026-118737 |
| Aspire | 4 | CVE-2026-118740, CVE-2026-120006, CVE-2026-120778, CVE-2026-120792 |
| Azure Front Door (AFD) | 1 | CVE-2026-118742 |
| Windows TPM | 1 | CVE-2026-119382 |
| Quality Windows Audio/Video Experience (QWAVE) service | 3 | CVE-2026-119387, CVE-2026-119388, CVE-2026-123389 |
| Windows Credential Manager | 1 | CVE-2026-119393 |
| Windows Enhanced Storage | 1 | CVE-2026-119394 |
| Storport.sys Driver | 1 | CVE-2026-119395 |
| Windows Remote Access API | 2 | CVE-2026-119396, CVE-2026-119853 |
| Kernel Transaction Manager | 4 | CVE-2026-119397, CVE-2026-122297, CVE-2026-94517, CVE-2026-94522 |
| Windows Backup Engine | 1 | CVE-2026-119405 |
| Windows Microsoft Account Sign-in Assistant | 2 | CVE-2026-119816, CVE-2026-119921 |
| Windows Text Services Framework | 4 | CVE-2026-119818, CVE-2026-119925, CVE-2026-119931, CVE-2026-96022 |
| Windows Storport Miniport Driver | 4 | CVE-2026-119823, CVE-2026-119830, CVE-2026-119875, CVE-2026-119885 |
| Windows USB Audio Class driver (usbaudio.sys) | 1 | CVE-2026-119829 |
| Windows BitLocker | 2 | CVE-2026-119832, CVE-2026-97015 |
| Windows Subsystem for Linux | 3 | CVE-2026-119834, CVE-2026-119846, CVE-2026-88237 |
| Windows Management Services | 1 | CVE-2026-119836 |
| Windows Universal Disk Format File System Driver (UDFS) | 3 | CVE-2026-119837, CVE-2026-119840, CVE-2026-122984 |
| Windows Graphics Kernel | 35 | CVE-2026-119841, CVE-2026-119966, CVE-2026-125137, CVE-2026-88217, CVE-2026-94519, CVE-2026-95879, CVE-2026-95888, CVE-2026-95895, CVE-2026-95906, CVE-2026-95909, CVE-2026-95922, CVE-2026-95932, CVE-2026-95935, CVE-2026-95938, CVE-2026-95942, CVE-2026-95946, CVE-2026-95948, CVE-2026-95950, CVE-2026-95953, CVE-2026-95966, CVE-2026-95971, CVE-2026-95973, CVE-2026-95974, CVE-2026-95983, CVE-2026-95991, CVE-2026-96048, CVE-2026-96122, CVE-2026-96124, CVE-2026-96126, CVE-2026-96133, CVE-2026-96137, CVE-2026-96144, CVE-2026-96160, CVE-2026-96168, CVE-2026-96171 |
| Windows Kerberos | 6 | CVE-2026-119847, CVE-2026-119940, CVE-2026-122164, CVE-2026-70240, CVE-2026-85844, CVE-2026-96082 |
| Virtual Hard Disk (VHD) Miniport Driver | 1 | CVE-2026-119849 |
| Windows Input System | 2 | CVE-2026-119862, CVE-2026-119916 |
| Windows Failover Cluster | 1 | CVE-2026-119869 |
| Windows IP Translation Configuration Service | 1 | CVE-2026-119871 |
| Windows USB Scanner Driver | 1 | CVE-2026-119876 |
| Microsoft XPS Document Converter | 3 | CVE-2026-119880, CVE-2026-119881, CVE-2026-122171 |
| Data Deduplication | 1 | CVE-2026-119883 |
| ActiveSyncProvider | 1 | CVE-2026-119889 |
| Windows PrintWorkflowUserSvc | 2 | CVE-2026-119898, CVE-2026-119928 |
| Microsoft Windows Speech | 1 | CVE-2026-119904 |
| Windows Sandbox | 1 | CVE-2026-119906 |
| Windows Function Discovery Resource Publication | 2 | CVE-2026-119907, CVE-2026-125134 |
| Windows Internet Information Services | 3 | CVE-2026-119909, CVE-2026-119936, CVE-2026-119961 |
| Windows Distributed Transaction Coordinator | 2 | CVE-2026-119917, CVE-2026-119919 |
| Windows Remote Desktop | 1 | CVE-2026-119932 |
| Microsoft Streaming Service | 1 | CVE-2026-119937 |
| Windows HTTP.sys | 4 | CVE-2026-119942, CVE-2026-119946, CVE-2026-119992, CVE-2026-95923 |
| Windows Mobile Device Management | 1 | CVE-2026-119944 |
| Windows Schannel | 1 | CVE-2026-119952 |
| Windows LDAP - Lightweight Directory Access Protocol | 1 | CVE-2026-119958 |
| Windows Cred SSProvider Protocol | 1 | CVE-2026-119962 |
| Graphic Fonts | 3 | CVE-2026-119969, CVE-2026-88211, CVE-2026-96084 |
| Windows Remote Procedure Call | 1 | CVE-2026-119972 |
| Visual Studio Code - GitHub Pull Requests and Issues Extension | 1 | CVE-2026-119976 |
| Microsoft Windows App Store | 1 | CVE-2026-119987 |
| Windows SMB | 2 | CVE-2026-119988, CVE-2026-122176 |
| Azure Pipelines | 1 | CVE-2026-119989 |
| Azure OpenAI | 1 | CVE-2026-119990 |
| Microsoft Configuration Manager | 1 | CVE-2026-119991 |
| Azure Confidential Clean Rooms | 1 | CVE-2026-121668 |
| Microsoft PowerShell Core | 3 | CVE-2026-121669, CVE-2026-121674, CVE-2026-121675 |
| Windows NTLM | 1 | CVE-2026-121680 |
| Microsoft Trace Data Helper | 2 | CVE-2026-121681, CVE-2026-122172 |
| Windows Update Stack | 1 | CVE-2026-122162 |
| Windows Image Acquisition | 1 | CVE-2026-122163 |
| Microsoft Windows Media Foundation | 2 | CVE-2026-122168, CVE-2026-96157 |
| Windows IKE Extension | 1 | CVE-2026-122169 |
| HID Parser Library | 6 | CVE-2026-122173, CVE-2026-125135, CVE-2026-96010, CVE-2026-96974, CVE-2026-96979, CVE-2026-96982 |
| Windows Autopilot | 1 | CVE-2026-122175 |
| Windows Maps | 1 | CVE-2026-122182 |
| Microsoft Defender | 1 | CVE-2026-122194 |
| Microsoft Dynamics 365 (on-premises) | 1 | CVE-2026-122196 |
| Microsoft Teams for Android | 2 | CVE-2026-122979, CVE-2026-69901 |
| Microsoft PowerShell | 1 | CVE-2026-122985 |
| Microsoft Azure Kubernetes Service | 1 | CVE-2026-122986 |
| Microsoft High Performance Computing (HPC) Pack | 1 | CVE-2026-122987 |
| Windows Admin Center | 1 | CVE-2026-122988 |
| Windows Program Compatibility Assistant Service | 2 | CVE-2026-123388, CVE-2026-88247 |
| Windows Network Connected Devices Auto-Setup Service | 1 | CVE-2026-125136 |
| Xbox | 2 | CVE-2026-66801, CVE-2026-95874 |
| Remote Desktop Gateway Service | 3 | CVE-2026-69327, CVE-2026-69565, CVE-2026-80094 |
| JDBC Driver for SQL Server | 1 | CVE-2026-70003 |
| Microsoft Bluetooth Driver | 1 | CVE-2026-70120 |
| Windows Bind Filter Driver | 1 | CVE-2026-70182 |
| Windows Local Security Authority Subsystem Service (LSASS) | 6 | CVE-2026-70231, CVE-2026-85801, CVE-2026-88227, CVE-2026-88228, CVE-2026-96016, CVE-2026-96066 |
| Windows iSCSI Target Service | 1 | CVE-2026-83684 |
| RPC Runtime | 1 | CVE-2026-83894 |
| Github Copilot | 1 | CVE-2026-83953 |
| AMD Zen | 2 | CVE-2026-84004, CVE-2026-84005 |
| Windows SSDP Service | 1 | CVE-2026-85907 |
| Windows Brokering File System | 4 | CVE-2026-85929, CVE-2026-88245, CVE-2026-95979, CVE-2026-96097 |
| Windows Camera Frame Server Monitor | 3 | CVE-2026-85942, CVE-2026-88232, CVE-2026-88238 |
| Windows Bluetooth A2DP driver | 1 | CVE-2026-88187 |
| Windows Bluetooth Service | 2 | CVE-2026-88213, CVE-2026-96001 |
| Windows Media Player | 1 | CVE-2026-88229 |
| Windows LUAFV | 2 | CVE-2026-88230, CVE-2026-96117 |
| Windows Biometric Service | 3 | CVE-2026-88239, CVE-2026-95877, CVE-2026-96127 |
| Windows Sensor Data Service | 1 | CVE-2026-88241 |
| Windows Ancillary Function Driver for WinSock | 1 | CVE-2026-88242 |
| Windows DirectX | 1 | CVE-2026-94507 |
| Windows Local Session Manager (LSM) | 1 | CVE-2026-95876 |
| Windows Push Notifications | 1 | CVE-2026-95881 |
| Windows Microsoft DirectMusic | 4 | CVE-2026-95882, CVE-2026-95891, CVE-2026-95896, CVE-2026-95901 |
| Windows USB Hub Driver | 3 | CVE-2026-95902, CVE-2026-95999, CVE-2026-96041 |
| Windows OLE | 2 | CVE-2026-95933, CVE-2026-96110 |
| Windows App Readiness Service | 1 | CVE-2026-95944 |
| Windows Virtual Filtering Platform (VFP) | 1 | CVE-2026-95962 |
| Data Sharing Service Client | 1 | CVE-2026-95963 |
| Windows Event Viewer | 1 | CVE-2026-95977 |
| Windows User Manager Service | 2 | CVE-2026-95987, CVE-2026-96037 |
| vhdmp.sys | 1 | CVE-2026-95989 |
| Windows Bluetooth Port Driver | 1 | CVE-2026-95996 |
| Windows Event Logging Service | 1 | CVE-2026-95997 |
| Windows StateRepository API | 1 | CVE-2026-95998 |
| Connected Devices Platform Service (Cdpsvc) | 1 | CVE-2026-96007 |
| Windows AppContainer | 1 | CVE-2026-96018 |
| Windows Push Notification Core | 1 | CVE-2026-96023 |
| Windows Connection Manager Service | 2 | CVE-2026-96042, CVE-2026-96043 |
| Microsoft Color Management | 3 | CVE-2026-96054, CVE-2026-96067, CVE-2026-96078 |
| HID class driver | 1 | CVE-2026-96059 |
| Windows Connected User Experiences and Telemetry | 3 | CVE-2026-96072, CVE-2026-96088, CVE-2026-96101 |
| Windows AppX Package Manager | 1 | CVE-2026-96074 |
| Windows Feedback Hub | 1 | CVE-2026-96075 |
| Windows DIAL Client | 1 | CVE-2026-96076 |
| Windows Rich Text Edit Control | 1 | CVE-2026-96081 |
| Windows WLAN Service | 1 | CVE-2026-96086 |
| Windows Internet (wininet.dll) | 1 | CVE-2026-96093 |
| Windows Phone Service | 1 | CVE-2026-96107 |
| Windows Kernel-Mode Drivers | 1 | CVE-2026-96139 |
| Windows Broker Infrastructure Service | 1 | CVE-2026-96156 |
| Microsoft ActiveX Installer Service | 1 | CVE-2026-96158 |
| Windows Clipboard Virtual Channel Extension | 1 | CVE-2026-96162 |
| Windows Imaging Component | 1 | CVE-2026-96164 |
| Windows Credential User Interface | 1 | CVE-2026-96978 |
| Windows PCI Bus Driver | 2 | CVE-2026-96981, CVE-2026-96992 |
| Secondary Logon | 1 | CVE-2026-96989 |
| Windows Performance Monitor | 1 | CVE-2026-96993 |
| Windows USM Communication Manager | 1 | CVE-2026-97000 |
| Windows VMSwitch | 1 | CVE-2026-97002 |
| Entra Device Registration | 1 | CVE-2026-109469 |
Other Information
At the time of publication, there were no new advisories included with the November Security Guidance.
Off
