Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
1095Microsoft CVEsreleased Tue 10 Nov
64Critical63 need an update · 1 fixed service-side
1Exploited in the wild
0Publicly disclosed
1In CISA KEV
0Revised since release
October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV
Act first · November 2026
Exploited, KEV-listed, or publicly disclosedPatch next · critical, "exploitation more likely", or top 5% EPSS · needs an update100
Showing 3 of 100All critical
| CVE | Vulnerability | Severity | CVSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|
| CVE-2026-113823 | Azure CycleCloud Information Disclosure VulnerabilityAzure CycleCloud | Important | 7.5 | Information DisclosureNetwork | — | |
| CVE-2026-121669 | PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core | Important | 6.1 | Information DisclosureNetwork | — | |
| CVE-2026-121674 | PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core | Important | 6.1 | Information DisclosureNetwork | — | |
| CVE-2026-121675 | PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core | Important | 6.1 | Information DisclosureNetwork | — | |
| CVE-2026-122985 | Microsoft PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell | Important | 6.1 | Information DisclosureNetwork | — | |
| CVE-2026-109460 | Microsoft Entra Private Network Connector Information Disclosure VulnerabilityMicrosoft Entra Private Network Connector | Important | 5.5 | Information DisclosureLocal | — | |
| CVE-2026-108470 | Microsoft Authentication Library (MSAL) for Node.js Information Disclosure VulnerabilityMicrosoft Authentication Library (MSAL) for Node.js | Important | — | Information Disclosure | — |