MSRC update 2026-11-11T08:41:43Z
This commit is contained in:
Vulnerability Bot committed
1 parent
d000dd2918
commit
ceaf24b48a
26 files changed
+26
-26
No files matched your search
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-220-microsoft-cves\">This release consists of the following 220 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Nuance PowerScribe</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26142\">CVE-2026-26142</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Bot Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32174\">CVE-2026-32174</a></td>\n<td>7.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Azure Kubernetes Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32193\">CVE-2026-32193</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32208\">CVE-2026-32208</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33113\">CVE-2026-33113</a></td>\n<td>5.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Azure Attestation service and Device Health Attestation Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33828\">CVE-2026-33828</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Ancillary Function Driver for WinSock</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-34335\">CVE-2026-34335</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics 365 (on-premises)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40371\">CVE-2026-40371</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio Code</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40376\">CVE-2026-40376</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Universal Disk Format File System Driver (UDFS)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40404\">CVE-2026-40404</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Universal Disk Format File System Driver (UDFS)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40409\">CVE-2026-40409</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Kinect</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41092\">CVE-2026-41092</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Stack Edge</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41098\">CVE-2026-41098</a></td>\n<td>8.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Windows DNS</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-Line truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-220-microsoft-cves\">This release consists of the following 220 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Nuance PowerScribe</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26142\">CVE-2026-26142</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Bot Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32174\">CVE-2026-32174</a></td>\n<td>7.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Azure Kubernetes Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32193\">CVE-2026-32193</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32208\">CVE-2026-32208</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33113\">CVE-2026-33113</a></td>\n<td>5.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Azure Attestation service and Device Health Attestation Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33828\">CVE-2026-33828</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Ancillary Function Driver for WinSock</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-34335\">CVE-2026-34335</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics 365 (on-premises)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40371\">CVE-2026-40371</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio Code</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40376\">CVE-2026-40376</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Universal Disk Format File System Driver (UDFS)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40404\">CVE-2026-40404</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Universal Disk Format File System Driver (UDFS)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40409\">CVE-2026-40409</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Kinect</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41092\">CVE-2026-41092</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Stack Edge</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41098\">CVE-2026-41098</a></td>\n<td>8.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Windows DNS</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-Line truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-1094-microsoft-cves\">This release consists of 1094 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>20</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>1</td>\n<td>1</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>53</td>\n<td>28</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>174</td>\n<td>7</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>25</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td>1</td>\n<td>59</td>\n<td>13</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>27</td>\n<td>3</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>726</td>\n<td></td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\">CVE-2026-124194</a></td>\n<td>Microsoft Outlook Spoofing Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-165-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 165 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Date</td>\n<td>Blog Post</td>\n</tr>\n<tr>\n<td>-----</td>\n<td>-----</td>\n</tr>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\Line truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-1094-microsoft-cves\">This release consists of 1094 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>20</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>1</td>\n<td>1</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>53</td>\n<td>28</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>174</td>\n<td>7</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>25</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td>1</td>\n<td>59</td>\n<td>13</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>27</td>\n<td>3</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>726</td>\n<td></td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\">CVE-2026-124194</a></td>\n<td>Microsoft Outlook Spoofing Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-165-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 165 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Date</td>\n<td>Blog Post</td>\n</tr>\n<tr>\n<td>-----</td>\n<td>-----</td>\n</tr>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\Line truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-1474-microsoft-cves\">This release consists of the following 1474 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th style=\"text-align: right;\">Vulnerabilities Addressed</th>\n<th style=\"text-align: right;\">Distinct Updates</th>\n<th>Update Type</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows</td>\n<td style=\"text-align: right;\">1,105</td>\n<td style=\"text-align: right;\">39</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td style=\"text-align: right;\">164</td>\n<td style=\"text-align: right;\">11</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td style=\"text-align: right;\">37</td>\n<td style=\"text-align: right;\">1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td style=\"text-align: right;\">22</td>\n<td style=\"text-align: right;\">8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td style=\"text-align: right;\">7</td>\n<td style=\"text-align: right;\">8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools (Dev Div)</td>\n<td style=\"text-align: right;\">65</td>\n<td style=\"text-align: right;\">103</td>\n<td>Mixed</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td style=\"text-align: right;\">15</td>\n<td style=\"text-align: right;\">20</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td style=\"text-align: right;\">4</td>\n<td style=\"text-align: right;\">3</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Edge</td>\n<td style=\"text-align: right;\">0</td>\n<td style=\"text-align: right;\">1</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Other</td>\n<td style=\"text-align: right;\">35</td>\n<td style=\"text-align: right;\">33</td>\n<td>Individual</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951\">CVE-2026-96951</a></td>\n<td>Windows Shell Security Feature Bypass Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398\">CVE-2026-108398</a></td>\n<td>.NET Framework Security Feature Bypass Vulnerability</td>\n<td>Publicly disclosed</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497\">CVE-2026-111497</a></td>\n<td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td>\n<td>Publicly disclosed</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-753-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 753 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>CVE ID</th>\n<th>Title</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Cisco Talos</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413\">CVE-2026-21413</a></td>\n<td>Raw Image Extension Remote Code Execution Vulnerability</td>\n</tr>\n<tr>\n<td>Google</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497\">CVE-2026-111497</a></td>\n<td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td>\n</tr>\n<tr>\n<td>GitHub_M</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707\">CVE-2026-92707</a></td>\n<td>MessagePack-CSharp Denial of Service Vulnerability</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 2Line truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-1474-microsoft-cves\">This release consists of the following 1474 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th style=\"text-align: right;\">Vulnerabilities Addressed</th>\n<th style=\"text-align: right;\">Distinct Updates</th>\n<th>Update Type</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows</td>\n<td style=\"text-align: right;\">1,105</td>\n<td style=\"text-align: right;\">39</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td style=\"text-align: right;\">164</td>\n<td style=\"text-align: right;\">11</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td style=\"text-align: right;\">37</td>\n<td style=\"text-align: right;\">1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td style=\"text-align: right;\">22</td>\n<td style=\"text-align: right;\">8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td style=\"text-align: right;\">7</td>\n<td style=\"text-align: right;\">8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools (Dev Div)</td>\n<td style=\"text-align: right;\">65</td>\n<td style=\"text-align: right;\">103</td>\n<td>Mixed</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td style=\"text-align: right;\">15</td>\n<td style=\"text-align: right;\">20</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td style=\"text-align: right;\">4</td>\n<td style=\"text-align: right;\">3</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Edge</td>\n<td style=\"text-align: right;\">0</td>\n<td style=\"text-align: right;\">1</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Other</td>\n<td style=\"text-align: right;\">35</td>\n<td style=\"text-align: right;\">33</td>\n<td>Individual</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951\">CVE-2026-96951</a></td>\n<td>Windows Shell Security Feature Bypass Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398\">CVE-2026-108398</a></td>\n<td>.NET Framework Security Feature Bypass Vulnerability</td>\n<td>Publicly disclosed</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497\">CVE-2026-111497</a></td>\n<td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td>\n<td>Publicly disclosed</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-753-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 753 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>CVE ID</th>\n<th>Title</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Cisco Talos</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413\">CVE-2026-21413</a></td>\n<td>Raw Image Extension Remote Code Execution Vulnerability</td>\n</tr>\n<tr>\n<td>Google</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497\">CVE-2026-111497</a></td>\n<td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td>\n</tr>\n<tr>\n<td>GitHub_M</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707\">CVE-2026-92707</a></td>\n<td>MessagePack-CSharp Denial of Service Vulnerability</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 2Line truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-999-microsoft-cves\">This release consists of the following 999 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>24</td>\n<td>5</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>24</td>\n<td>24</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>4</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>122</td>\n<td>19</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Office 2016</td>\n<td>1</td>\n<td>122</td>\n<td>11</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>24</td>\n<td>19</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>16</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL</td>\n<td>1</td>\n<td>61</td>\n<td>9</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>714</td>\n<td>17</td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880\">CVE-2026-85880</a></td>\n<td>Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963\">CVE-2026-81963</a></td>\n<td>Windows Update Stack Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921\">CVE-2026-85921</a></td>\n<td>Windows Secure Kernel Mode Elevation of Privilege Vulnerability</td>\n<td>Out-of-Band Release</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-25-non-microsoft-cves\">We are republishing 25 non-Microsoft CVEs</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A listLine truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-999-microsoft-cves\">This release consists of the following 999 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>24</td>\n<td>5</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>24</td>\n<td>24</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>4</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>122</td>\n<td>19</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Office 2016</td>\n<td>1</td>\n<td>122</td>\n<td>11</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>24</td>\n<td>19</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>16</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL</td>\n<td>1</td>\n<td>61</td>\n<td>9</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>714</td>\n<td>17</td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880\">CVE-2026-85880</a></td>\n<td>Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963\">CVE-2026-81963</a></td>\n<td>Windows Update Stack Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921\">CVE-2026-85921</a></td>\n<td>Windows Secure Kernel Mode Elevation of Privilege Vulnerability</td>\n<td>Out-of-Band Release</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-25-non-microsoft-cves\">We are republishing 25 non-Microsoft CVEs</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A listLine truncated
|
||||
Reference in new issue
Block a user