Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)

Microsoft Patch Tuesday November 2026
Published: 2026-11-10. Last Updated: 2026-11-11 18:28:43 UTC
by Johannes Ullrich (Version: 1)
5 comment(s)
by Johannes Ullrich (Version: 1)
Microsoft continues its AI-induced patch surge, addressing 1,260 different vulnerabilities this month. 68 of these vulnerabilities are considered critical. 167 of the vulnerabilities are Chromium issues affecting Microsoft Edge.
One of the vulnerabilities, CVE-2026-124194, a spoofing vulnerability in Outlook, is already being exploited.
Other vulnerabilities of note:
CVE-2026-119958: A critical RCE vulnerability in Microsoft LDAP.

• CVE-2026-109459, CVE-2026-119967, CVE-2026-116710, CVE-2026-119963, CVE-2026-119964: Several critical vulnerabilities in Microsoft Queuing and Queue Manager.

• CVE-2026-113859: Windows TCP/IP Remote Code Execution Vulnerability. CVSS score is only 7.5.

• Description |

---|
CVE | Disclosed | Exploited | Exploitability (old versions) | current version | Severity | CVSS Base (AVG) | CVSS Temporal (AVG) |
---|---|---|---|---|---|---|---|
.NET Denial of Service Vulnerability |
CVE-2026-109475 | No | No | - | - | Important | 7.5 | 6.5 |
CVE-2026-118747 | No | No | - | - | Important | 7.5 | 6.5 |
CVE-2026-120796 | No | No | - | - | Important | 5.3 | 4.6 |
.NET Elevation of Privilege Vulnerability |
CVE-2026-105544 | No | No | - | - | Important | 7.5 | 6.5 |
CVE-2026-114155 | No | No | - | - | Important | 7.5 | 6.5 |
.NET Security Feature Bypass Vulnerability |
CVE-2026-118746 | N