SANS INTERNET STORM CENTER, INFOCON: GREEN
Microsoft Patch Tuesday November 2026, (Tue, Nov 10th)
HIGH Patch Tuesday Microsoft Edge LDAP
Strategic summary
Microsoft addressed a total of 1,260 vulnerabilities in November 2026, 68 of which are rated critical. 167 of these vulnerabilities are Chromium issues affecting Microsoft Edge. An Outlook spoofing vulnerability (CVE-2026-124194) is already being exploited. Additional critical vulnerabilities affect Microsoft LDAP, Microsoft Queuing and Queue Manager, and Windows TCP/IP.
Key findings
- Microsoft patches 1,260 vulnerabilities in November 2026, 68 rated critical.
- 167 of the vulnerabilities are Chromium issues affecting Microsoft Edge.
- CVE-2026-124194, an Outlook spoofing vulnerability, is already being exploited.
- Critical RCE vulnerabilities affect Microsoft LDAP (CVE-2026-119958) and Microsoft Queuing and Queue Manager (multiple CVEs).
- CVE-2026-113859 is a Windows TCP/IP remote code execution vulnerability with CVSS score 7.5.
Relevance for you
Beyond the pure patch list, it is relevant that an Outlook spoofing flaw is already being exploited in the wild and that a large share of the fixes affect Chromium components in Edge.
Risk score
20
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 15.00
- raw before weight
- 15.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational