Microsoft Server security updates, November 2026 (Patch Tuesday 2026-11-10)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in November 2026, including the Patch Tuesday release on 2026-11-10 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 442
Critical: 14
High: 307
In CISA KEV: 0

Microsoft server CVEs, November 2026

Nov 10, 2026
Medium [CVE-2026-119972] Remote Procedure Call Denial of Service Vulnerability
Medium5.9
Nov 10, 2026
Medium [CVE-2026-122162] Windows Update Stack Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-122297] Windows Kernel Transaction Manager Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-122474] Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
Medium5.9
Nov 10, 2026
Medium [CVE-2026-67382] Microsoft SQL Server Information Disclosure Vulnerability
Medium6.5
Nov 10, 2026
Medium [CVE-2026-68783] Microsoft SQL Server Information Disclosure Vulnerability
Medium6.5
Nov 10, 2026
Medium [CVE-2026-84004] AMD Zen Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-84005] AMD Zen Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-85907] Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Medium4.4
Nov 10, 2026
Medium [CVE-2026-88211] Graphic Fonts Information Disclosure Vulnerability
Medium5.7
Nov 10, 2026
Medium [CVE-2026-88217] Windows Graphics Kernel Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-88220] Windows Performance Counters Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-88231] Windows iSCSI Information Disclosure Vulnerability
Medium5.7
Nov 10, 2026
Medium [CVE-2026-88247] Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-95884] Windows Active Directory Certificate Services Information Disclosure Vulnerability
Medium5.3
Nov 10, 2026
Medium [CVE-2026-95908] Windows Remote Desktop Client Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-95910] Windows Hyper-V Security Feature Bypass Vulnerability
Medium6.7
Nov 10, 2026
Medium [CVE-2026-95944] Windows App Readiness Service Tampering Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-95946] Windows Graphics Kernel Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-95977] Windows Event Viewer Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-95998] Windows StateRepository API Tampering Vulnerability
Medium4.4
Nov 10, 2026
Medium [CVE-2026-96001] Windows Bluetooth Service Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-96017] Role: DNS Server Denial of Service Vulnerability
Medium4.9
Nov 10, 2026
Medium [CVE-2026-96018] Windows AppContainer Information Disclosure Vulnerability
Medium6.5
Nov 10, 2026
Medium [CVE-2026-96022] Windows Text Services Framework Information Disclosure Vulnerability
Medium5.6
Nov 10, 2026
Medium [CVE-2026-96041] Windows USB Hub Driver Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-96058] Windows Kernel Information Disclosure Vulnerability
Medium4.6
Nov 10, 2026
Medium [CVE-2026-96059] HID class driver Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-96086] Windows WLAN Service Denial of Service Vulnerability
Medium6.5
Nov 10, 2026
Medium [CVE-2026-96093] Windows Internet (wininet.dll) Information Disclosure Vulnerability
Medium4.7
Nov 10, 2026
Medium [CVE-2026-96101] Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-96110] Windows OLE Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-96137] Windows Graphics Kernel Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-96150] Microsoft Windows Codecs Library Information Disclosure Vulnerability
Medium5.6
Nov 10, 2026
Medium [CVE-2026-96156] Windows Broker Infrastructure Service Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-96981] Windows PCI Bus Driver Elevation of Privilege Vulnerability
Medium6.4
Nov 10, 2026
Medium [CVE-2026-96983] Windows DNS Denial of Service Vulnerability
Medium5.3
Nov 10, 2026
Medium [CVE-2026-96989] Secondary Logon Information Disclosure Vulnerability
Medium5.5
Nov 10, 2026
Medium [CVE-2026-96992] Windows PCI Bus Driver Elevation of Privilege Vulnerability
Medium6.4
Nov 10, 2026
Medium [CVE-2026-97015] Windows BitLocker Security Feature Bypass Vulnerability
Medium6.8
Nov 10, 2026
Low [CVE-2026-113766] Windows Language Experience Service Tampering Vulnerability
Low3.3
Nov 10, 2026
Low [CVE-2026-119883] Data Deduplication Security Feature Bypass Vulnerability
Low3.3

Page 5 of 5 · 42 of 442

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.