Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
November 2026 Patch Tuesday
Lead record- Why these records are connected
- Records grouped into the same Patch Tuesday cycle; this does not establish a single cause.
- Connection key
pt:2026-11- Public snapshot refreshed
- today 16:29 UTC
- Distinct source events
- 1105
- Source records represented
- 1105
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Wed 4 Nov · Dated source evidence · Published vulnerability Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2026-122518 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Thu 5 Nov · Dated source evidence · Published vulnerability Entra Device Registration Elevation of Privilege VulnerabilityCVE-2026-109469 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Tue 10 Nov · Dated source evidence · Published vulnerability HEIF Image Extensions Remote Code Execution VulnerabilityCVE-2026-100204 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows NTFS Elevation of Privilege VulnerabilityCVE-2026-100223 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows NTFS Tampering VulnerabilityCVE-2026-102200 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Modern Device Management (MDM) Remote Code Execution VulnerabilityCVE-2026-102219 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Azure CycleCloud Elevation of Privilege VulnerabilityCVE-2026-102224 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Visual Studio Code Information Disclosure VulnerabilityCVE-2026-102230 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Visual Studio Code Security Feature Bypass VulnerabilityCVE-2026-102236 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Shell Information Disclosure VulnerabilityCVE-2026-102868 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityCVE-2026-103571 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Volume Shadow Copy Elevation of Privilege VulnerabilityCVE-2026-105017 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Partition Management Driver Elevation of Privilege VulnerabilityCVE-2026-105018 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105020 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105021 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105022 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105023 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2026-105024 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105025 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105026 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Win32k Elevation of Privilege VulnerabilityCVE-2026-105028 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105490 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105491 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Microsoft Remote Registry Service Denial of Service VulnerabilityCVE-2026-105492 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105493 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Azure NFS mount helper (aznfs) Elevation of Privilege VulnerabilityCVE-2026-105494 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105495 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105496 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105497 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105498 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityCVE-2026-105499 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Installer Elevation of Privilege VulnerabilityCVE-2026-105501 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Management Instrumentation Elevation of Privilege VulnerabilityCVE-2026-105503 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Kernel Elevation of Privilege VulnerabilityCVE-2026-105504 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Microsoft Input Method Editor (IME) Elevation of Privilege VulnerabilityCVE-2026-105505 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Shell Information Disclosure VulnerabilityCVE-2026-105506 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Installer Elevation of Privilege VulnerabilityCVE-2026-105507 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityCVE-2026-105509 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege VulnerabilityCVE-2026-105510 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 10 Nov · Dated source evidence · Published vulnerability Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege VulnerabilityCVE-2026-105511 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required