Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
1095Microsoft CVEsreleased Tue 10 Nov
64Critical61 need an update · 3 fixed service-side
1Exploited in the wild
0Publicly disclosed
1In CISA KEV
0Revised since release
October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV
Act first · November 2026
Exploited, KEV-listed, or publicly disclosedPatch next · critical, "exploitation more likely", or top 5% EPSS · needs an update98
Showing 3 of 98All critical
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-105494 | Azure NFS mount helper (aznfs) Elevation of Privilege VulnerabilityAzure NFS mount helper (aznfs) | Important | — | — | EoP | — | |
| CVE-2026-109492 | Microsoft MCP Gateway Elevation of Privilege VulnerabilityMicrosoft MCP Gateway | Important | — | — | EoP | — | |
| CVE-2026-119906 | Windows Sandbox Elevation of Privilege VulnerabilityWindows Sandbox | Important | — | — | EoP | — | |
| CVE-2026-120006 | Aspire Elevation of Privilege VulnerabilityAspire | Important | — | — | EoP | — | |
| CVE-2026-109469 | Entra Device Registration Elevation of Privilege VulnerabilityEntra Device Registration | Critical | 10.0 | 0.7% | EoPNetwork | Service-side fix | |
| CVE-2026-119990 | Azure OpenAI Elevation of Privilege VulnerabilityAzure OpenAI | Critical | 9.8 | — | EoPNetwork | Service-side fix | |
| CVE-2026-114160 | Azure Managed Grafana Elevation of Privilege VulnerabilityAzure Managed Grafana | Critical | — | — | EoP | Service-side fix |