Home › Microsoft Patch Tuesday › November 2026

Microsoft Patch Tuesday, November 2026

·

Microsoft's November 2026 security release, published November 10, 2026: 27 updates fixing 1,417 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Microsoft's Severity ratings

Of the 1,417 CVEs in Microsoft's November 2026 release document, Microsoft rated 70 Critical, 1,147 Important, 133 Moderate and 67 Low. Source: MSRC CVRF 2026-Nov, read 2026-11-12, recorded automatically from Microsoft's document.

27
Updates (KBs)
1,417
CVEs fixed
1
Exploited zero-day
0
On the CISA KEV list
70
Critical, rated by Microsoft

Severity, as Microsoft rates it

Critical 70Important 1,147Moderate 133Low 67

That covers 1,417 of the 1,417.

Zero-days in this release

CVE-2026-124194Microsoft OutlookCVSS 6.5Exploited

Actively exploited CVEs (CISA KEV)

None of this month's CVEs were in the CISA Known Exploited Vulnerabilities catalog as of the last refresh.

Other high-risk CVEs (CVSS 8.8+)

CVE-2026-120002Microsoft SharePoint Server Elevation of Privilege VulnerabilityCVSS 9.9
CVE-2026-116945Microsoft SQL Server Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-116928Windows Search Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-119958Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-85844Windows Kerberos Elevation of Privilege VulnerabilityCVSS 9.8
CVE-2026-88218Windows DNS Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-88234Windows iSCSI Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-88243Windows DHCP Server Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-95882Microsoft DirectMusic Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-95901Microsoft DirectMusic Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-96067Microsoft Color Management Remote Code Execution VulnerabilityCVSS 9.8
CVE-2026-96078Microsoft Color Management Remote Code Execution VulnerabilityCVSS 9.8

Products fixed this month

Windows 11 Version 24H2 for ARM64-based Systems (3)Windows 11 Version 24H2 for x64-based Systems (3)Windows 11 Version 25H2 for ARM64-based Systems (3)Windows 11 Version 25H2 for x64-based Systems (3)Windows 11 Version 26H2 for ARM64-based Systems (3)Windows 11 Version 26H2 for x64-based Systems (3)Windows Server 2025 (3)Windows Server 2025 (Server Core installation) (3)Windows 10 Version 1607 for 32-bit Systems (2)Windows 10 Version 1607 for x64-based Systems (2)

Every update in this release

All 27 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

UpdateSeverityMax CVSSCVEs fixedProductsAlso
KB5002945Critical9.924Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5129299Critical9.857Microsoft SQL Server 2025 for x64-based Systems CU10Support · Catalog
KB5129300Critical9.854Microsoft SQL Server 2022 for x64-based Systems (CU27)Support · Catalog
KB5132745Critical9.850Microsoft SQL Server 2019 for x64-based Systems (CU32)Support · Catalog
KB5132746Critical9.851Microsoft SQL Server 2017 for x64-based Systems (CU31)Support · Catalog
KB5132748Critical9.856Microsoft SQL Server 2025 for x64-based Systems (GDR)Support · Catalog
KB5132751Critical9.848Microsoft SQL Server 2019 for x64-based Systems (GDR)Support · Catalog
KB5132749Critical9.844Microsoft SQL Server 2017 for x64-based Systems (GDR)Support · Catalog
KB5132747Critical9.852Microsoft SQL Server 2022 for x64-based Systems (GDR)Support · Catalog
KB5131291Critical9.8507Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, and 1 moreSupport · Catalog
KB5131085Critical9.8575Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, and 1 moreSupport · Catalog
KB5131096Critical9.8546Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, and 3 moreSupport · Catalog
KB5131090Critical9.8592Windows Server 2022, Windows Server 2022 (Server Core installation)Support · Catalog
KB5131087Critical9.8574Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based SystemsSupport · Catalog
KB5132061Critical9.8594Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, and 3 moreSupport · Catalog
KB5132043Critical9.8595Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, and 3 moreSupport · Catalog
KB5131080Critical9.8627Windows Server 2025, Windows Server 2025 (Server Core installation)Support · Catalog
KB5131077Critical9.8625Windows Server 2025, Windows Server 2025 (Server Core installation)Support · Catalog
KB5132059Critical9.8597Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based SystemsSupport · Catalog
KB5135243Critical9.015.NET 8.0 installed on Windows, .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OSSupport · Catalog
KB5135242Critical9.014.NET 9.0 installed on Windows, .NET 9.0 installed on Linux, .NET 9.0 installed on Mac OSSupport · Catalog
KB5135241Critical9.015.NET 10.0 installed on Windows, .NET 10.0 installed on Linux, .NET 10.0 installed on Mac OSSupport · Catalog
KB5002946High8.856Office Online ServerSupport · Catalog
KB5133453High8.89Microsoft Exchange Server Subscription Edition RTMSupport · Catalog
KB5135385High8.83Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, and 3 moreSupport · Catalog
KB5135386High8.83Windows Server 2025, Windows Server 2025 (Server Core installation)Support · Catalog
KB5131083High7.83Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, and 1 moreSupport · Catalog
Take this release to your AI

Composed from the November 2026 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

Now see your own patch state.

Senserva reads your Microsoft 365, Intune, Defender, and Entra ID environment and turns this release into your list: every update still missing, on every device, ranked by what attackers are actually exploiting. The 650+ configuration checks come with it.

1Find it2Fix it3Prove it
Start my free patch auditAll you do is register.
Reference: Microsoft CVE and vulnerability management, ranked by real-world risk, and the Microsoft patching guide.
Data notice: this page is provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative Microsoft advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.