Microsoft November / December 2026 Security Updates

Microsoft November / December 2026 Security Updates

November 2026 Security Updates

This release consists of 1094 Microsoft CVEs:
Product Family Updates per Product/Version Vulnerabilities Addressed Distinct Updates Type of Update
Azure 1 20 Individual
Defender 1 1 1 Cumulative
Developer Tools 1 53 28 Cumulative
Exchange Server 1 9 1 Cumulative
Office 1 174 7 Cumulative (except 2016)
Other 1 25 Individual
SQL Server 1 59 13 Cumulative
SharePoint Server 1 27 3 Cumulative
Windows 1 726 Cumulative

Notable CVEs
CVE ID Title Notable Item
CVE-2026-124194 Microsoft Outlook Spoofing Vulnerability Exploitation Detected
We are republishing 165 non-Microsoft CVE (Chrome CVEs not listed):
Security Update Guide Blog Posts
Date Blog Post
Date Blog Post
----- -----
October 13, 2026 Using risk cohorts to prioritize security updates
October 31, 2025 You asked, we delivered: Introducing new features for an improved security experience
October 28, 2025 Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know
October 22, 2025 Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond
November 12, 2024 Toward greater transparency: Publishing machine-readable CSAF files
June 27, 2024 Toward greater transparency: Unveiling Cloud Service CVEs
April 9, 2024 Toward greater transparency: Security Update Guide now shares CWEs for CVEs
Relevant Resources

• The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.
• Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).

KB Article Product
5129299 SQL Server 2025 CU10
5129300 SQL Server 2022 CU27
5131077 Windows Server 2025 (Hotpatch)
5131080 Windows Server 2025
5131085 Windows 10, version 1809, Windows Server 2019
5131090 Windows Server 2022
5131096 Windows 10, versions 21H2, 22H2
5131291 Windows 10, version 1607. Windows Server 2016
5135242 .NET 9.0 Update
5135243 .NET 8.0 Update
Released: Nov 10, 2026

November 2026 Security Updates - Release Notes - Security Update Guide - Microsoft