November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far
Microsoft admins wail and gnash their teeth
On this November Patch Tuesday, Microsoft released over 1,000 updates to its products, but only one zero-day vulnerability had been exploited before the patches were released. Microsoft security experts emphasized the need to prioritize patching these vulnerabilities, as attackers may be actively scanning for vulnerable versions and reverse engineering the patches.
Among the critical vulnerabilities, two are particularly concerning as they are zero-click threats, meaning they do not require user interaction to exploit. These include CVE-2026-116928, an out-of-bounds write vulnerability in Microsoft Windows Search Component, and CVE-2026-119958, an out-of-bounds write vulnerability in Windows implementation of the Lightweight Directory Access Protocol (LDAP).
Additionally, a critical flaw in the Windows Xbox Live Networking Service, CVE-2026-112967, was also included in this month's patch.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
