Microsoft’s November 2026 Patch Tuesday Updates Fix 63 Critical Flaws

Microsoft has released the November 2026 Patch Tuesday updates for all supported versions of Windows 11. This month, Microsoft fixed a total of 1090 security vulnerabilities affecting Windows, Office, Windows networking and remote access, Windows Security and identity, Azure, cloud and identity; Exchange Server; Microsoft Dynamics, and other components.

On the quality and experience updates front, Windows 11 versions 26H2, 25H2, and 24H2 are getting several improvements, including a new recovery option that reinstalls Windows 11 using a Windows image and device drivers downloaded from Windows Update.

1090 vulnerabilities fixed in the November 2026 Patch Tuesday updates

Among the 1090 Windows vulnerabilities Microsoft fixed this month, 63 are rated “Critical,” and one of them is already being exploited by attackers. Most of the vulnerabilities are rated “Important” in severity, and you can find more details about all of them below:

• CVE-2026-124194: This is a Microsoft Outlook vulnerability that attackers are already exploiting in the wild. This security flaw, which carries a CVSS score of 6.5, could put sensitive Windows login credentials at risk.

• CVE-2026-118207: This is a high-severity remote code execution (RCE) vulnerability in Microsoft Exchange Server Subscription Edition caused by improper input validation. This flaw could be exploited by low-level authorized users with network access to run arbitrary code on the Exchange server.

• CVE-2026-120002: This is a critical elevation of privilege (EoP) vulnerability in Microsoft SharePoint Server Subscription Edition caused by incorrect authorization checks. An attacker with a low-privileged authenticated account could exploit the flaw over the network to gain higher privileges and potentially obtain administrative access and compromise the entire SharePoint environment.

• CVE-2026-110043: This is a high-severity remote code execution (RCE) vulnerability in Microsoft Office Outlook caused by a heap-based buffer overflow. An attacker could exploit the flaw by sending a specially crafted file or content that could enable arbitrary code execution and potentially allow full compromise of the affected system.

• CVE-2026-116928: This critical remote code execution (RCE) vulnerability in the Microsoft Windows Search Component stems from an out-of-bounds write flaw. An unauthenticated attacker could exploit the vulnerability over the network without user interaction, potentially gaining the ability to execute arbitrary code and fully compromise affected Windows systems and servers.

You can find the full list of CVEs released by Microsoft with the November 2026 Patch Tuesday updates below:

Quality and experience updates

For Windows 11 versions 26H2 and 25H2, the KB5132061 patch improves NTLM security by enabling clients to offer NTLM message signing by default for non-anonymous connections. This update also strengthens security for PowerShell script signing and signature verification by introducing stricter encoding validation.

Microsoft has also addressed an issue where Remote Desktop Protocol (RDP) connections might fail on the client due to a certificate mismatch following the installation of the October 2026 non-security preview update. Moreover, this update fixes a bug that was previously causing adding a printer published in Active Directory through Settings > Bluetooth & devices > Printers & scanners > Add device to fail with error 87: “The parameter is incorrect.”

Windows Update testing and best practices

Organizations looking to deploy this month’s patches should conduct thorough testing before deploying them widely on production systems. That said, applying the patches widely shouldn’t be delayed longer than necessary as hackers start to work out how to weaponize newly reported vulnerabilities.

A best practice is to make sure you have backed up systems before applying updates. Every month, users experience issues with Windows updates that lead to systems not booting, application and hardware compatibility issues, or even data loss in extreme cases.

There are backup tools built into Windows and Windows Server that you can use to restore systems in the event a patch causes a problem. The backup features in Windows can be used to restore an entire system, or files and folders on a granular basis.