Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

1095Microsoft CVEsreleased Tue 10 Nov 64Critical61 need an update · 3 fixed service-side 1Exploited in the wild

0Publicly disclosed

1In CISA KEV

0Revised since release

October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV

Act first · November 2026

Exploited, KEV-listed, or publicly disclosed

CVE-2026-124194ModerateExploitedCISA KEV · due 24 NovSpoofingNetwork

Microsoft Outlook Spoofing Vulnerability

CVSS 6.5 No KB listed

Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update98

CVE-2026-118146CriticalRCENetworkExploitation More Likely

Windows Active Directory Domain Services Remote Code Execution Vulnerability

CVSS 8.8 KB5131077 KB5131080 KB5131085+7

CVE-2026-118207CriticalRCENetworkExploitation More Likely

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 8.8 KB5133453

CVE-2026-113862CriticalRCENetworkExploitation More Likely

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVSS 8.1 KB5131077 KB5131080 KB5131085+7

Showing 3 of 98All critical

By impact

Elevation of Privilege 535

Remote Code Execution 297

Information Disclosure 157

Denial of Service 46

Security Feature Bypass 27

By product family

Windows 744

ESU 658

Microsoft Office 204

SQL Server 54

Developer Tools 50

CVEs · November 2026

204 matches in Microsoft Office · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-119993	Microsoft Office Outlook Information Disclosure VulnerabilityMicrosoft Office Outlook	Important	6.5	Information DisclosureNetwork	—
CVE-2026-119998	Microsoft Office Security Feature Bypass VulnerabilityMicrosoft Office	Important	6.5	SFBNetwork	—
CVE-2026-119999	Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	6.5	Information DisclosureNetwork	—
CVE-2026-124178	Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	6.5	Information DisclosureNetwork	KB5002946
CVE-2026-124179	Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	6.5	Information DisclosureNetwork	KB5002946
CVE-2026-124183	Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	6.5	Information DisclosureNetwork	—
CVE-2026-124210	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002945
CVE-2026-124233	Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	6.5	Information DisclosureNetwork	—
CVE-2026-123395	Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	5.9	Information DisclosureLocal	—
CVE-2026-112720	Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	5.5	Information DisclosureLocal	—
CVE-2026-112736	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	5.3	SpoofingNetwork	KB5002945
CVE-2026-109456	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	SpoofingNetwork	KB5002945