Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)
63 Critical 1029 Important 1 Moderate 0 Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as important, and one rated as moderate. This month’s update includes patches for 287 products and components. The following table lists the products with the most CVEs patched this month. A full list of patched products is available in the appendix. Rank Product CVE Count 1 Microsoft Office Word 65 2 Microsoft Office Excel 64 3 SQL Server 53 4 Windows Advanced Rasterization Platform 37 5 Windows Installer 36 6 Windows Graphics Kernel 35 7 Windows Kernel 28 8 Microsoft Office SharePoint 27 9 Windows DNS 22 10 (Tie) Microsoft Office Outlook 20 10 (Tie) Windows Print Spooler Components 20 Elevation of Privilege (EoP) vulnerabilities accounted for 48.9% of the vulnerabilities patched this month, followed by remote code execution (RCE) vulnerabilities at 27.1%. Moderate CVE
Continue on Tenable Security Research ↗ ‹ All news Get the newsletter
The summary and image come from Tenable Security Research; the image is shown from their website.