MSRC update 2026-11-13T00:40:33Z
This commit is contained in:
Vulnerability Bot committed
1 parent
7c8f745337
commit
b4b0fff3cc
2 files changed
+2
-2
No files matched your search
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-1094-microsoft-cves\">This release consists of 1094 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>20</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>1</td>\n<td>1</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>53</td>\n<td>28</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>174</td>\n<td>7</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>25</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td>1</td>\n<td>59</td>\n<td>13</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>27</td>\n<td>3</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>726</td>\n<td></td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\">CVE-2026-124194</a></td>\n<td>Microsoft Outlook Spoofing Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-165-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 165 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Date</td>\n<td>Blog Post</td>\n</tr>\n<tr>\n<td>-----</td>\n<td>-----</td>\n</tr>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\Line truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-1094-microsoft-cves\">This release consists of 1094 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>20</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>1</td>\n<td>1</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>53</td>\n<td>28</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>174</td>\n<td>7</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>25</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td>1</td>\n<td>59</td>\n<td>13</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>27</td>\n<td>3</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>726</td>\n<td></td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\">CVE-2026-124194</a></td>\n<td>Microsoft Outlook Spoofing Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-165-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 165 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Date</td>\n<td>Blog Post</td>\n</tr>\n<tr>\n<td>-----</td>\n<td>-----</td>\n</tr>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\Line truncated
|
||||
Reference in new issue
Block a user