// AI threat desk · 15 Nov 2026
Home/CVE · Vulns & Patches
Vulns & PatchesHighPATCHCVSS not assigned

Microsoft fixed 1,093 Windows and software vulnerabilities

Microsoft released updates for 1,093 vulnerabilities across Windows and supported software, including 63 critical flaws and an Outlook zero-day.

· 2 min read
AI-generated image of security analysts reviewing software vulnerability updates on blurred monitors in a dark operations centre.
AI-generated image, not a photo of the event.
Key takeaways
  • Microsoft’s November release fixed 1,093 vulnerabilities across Windows and supported software.
  • The release addressed 63 critical flaws, including a zero-day in Microsoft Outlook.

Microsoft released updates fixing 1,093 vulnerabilities across Windows operating systems and supported software.

The release included 63 critical flaws, including a zero-day in Microsoft Outlook. KrebsOnSecurity reported that 535 of the vulnerabilities allow an attacker to elevate privileges, while nearly half of the critical flaws are remote code execution vulnerabilities.

The update round adds to more than 5,100 security patches Microsoft said it has shipped so far in 2026. The company also said advances in artificial intelligence helped it find and fix the recent high volume of security bugs.

On this page

Microsoft’s 2026 patch total passed 5,100 after the November release

KrebsOnSecurity reported that the latest round means Microsoft has shipped more than 5,100 security patches so far this year. It said Microsoft credits advances in artificial intelligence for helping find and fix such a large volume of security bugs in recent months.

KrebsOnSecurity reported that Microsoft pushed more than 1,400 fixes last month. Dark Reading reported that Microsoft disclosed a remote code execution vulnerability in Microsoft Paint, but messaging regarding a patch remained unclear for weeks.

Other vendors issued security updates alongside Microsoft

Google said Chrome version 157.0.8103.50 resolved nine security holes, including CVE-2026-125350. Adobe released patches for at least 110 vulnerabilities across a range of products, with nearly half rated high severity.

Other software makers also issued security updates this week. Google released Chrome version 157.0.8103.50 to resolve nine security holes, and Adobe released patches for at least 110 vulnerabilities.

What to do now

  1. Back up any important data before applying operating-system updates.

FAQ

What did Microsoft fix in the November 2026 security update?

KrebsOnSecurity reported that Microsoft fixed 1,093 vulnerabilities, including 63 critical flaws, in Windows operating systems and supported software.

Which Microsoft products are affected by the November 2026 patches?

The release covers Windows operating systems and supported software. KrebsOnSecurity noted a zero-day in Microsoft Outlook among the flaws addressed.

What other security updates were released at the same time?

Google released Chrome version 157.0.8103.50 to resolve nine security holes, while Adobe patched at least 110 vulnerabilities.

Sources

  1. Microsoft Fixes Nearly 1,100 Security Vulnerabilities, Microsoft
  2. Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion, Dark Reading
  3. Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951), Help Net Security
How we checked this story
ClaimSourceStatus
Microsoft released updates fixing almost 1,100 vulnerabilities in Windows operating systems and supported software.MicrosoftAttributed
Microsoft’s November Patch Tuesday addressed 63 critical flaws, including a zero-day in Microsoft Outlook.MicrosoftAttributed
Microsoft’s November release addressed 1,093 vulnerabilities, including 535 that could let attackers elevate privileges on vulnerable devices.MicrosoftAttributed
Microsoft has shipped more than 5,100 security patches so far in 2026.MicrosoftAttributed
Microsoft credited advances in artificial intelligence with helping find and fix the recent high volume of security bugs.MicrosoftAttributed
Microsoft pushed more than 1,400 fixes in October.MicrosoftAttributed
A Microsoft Paint remote-code-execution vulnerability was disclosed the previous month, but patch messaging remained unclear for weeks.Microsoft, via Dark ReadingAttributed
Google said chrome version 157.0.8103.50 resolved nine security holes, including CVE-2026-125350.GoogleAttributed
Adobe released patches for at least 110 vulnerabilities, with nearly half rated high severity.AdobeAttributed

Could not verify

  • How many organizations or users were affected by the vulnerabilities is not established.
  • Whether the Microsoft Paint vulnerability was fixed in this release is not established.
cvemicrosoft
See all in Vulns & Patches →
Explore with AI
ChatGPT
Claude
Perplexity
Grok