{
  "id": 19429263,
  "title": "November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far",
  "url": "https://urgent.news/2026/11/10/november-patch-tuesday-boasts-over-1-000-bugs-but-only-one-zero-day",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-10T22:37:01.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/11/10/november-patch-tuesday-boasts-over-1000-bugs-but-only-one-zero-day-so-far/5308946"
  },
  "original_language": "en",
  "account": "On this November Patch Tuesday, Microsoft released over 1,000 updates to its products, but only one zero-day vulnerability had been exploited before the patches were released. Microsoft security experts emphasized the need to prioritize patching these vulnerabilities, as attackers may be actively scanning for vulnerable versions and reverse engineering the patches. Among the critical vulnerabilities, two are particularly concerning as they are zero-click threats, meaning they do not require user interaction to exploit. These include CVE-2026-116928, an out-of-bounds write vulnerability in Microsoft Windows Search Component, and CVE-2026-119958, an out-of-bounds write vulnerability in Windows implementation of the Lightweight Directory Access Protocol (LDAP). Additionally, a critical flaw in the Windows Xbox Live Networking Service, CVE-2026-112967, was also included in this month's patch.",
  "summary": "Microsoft admins wail and gnash their teeth",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Record",
        "title": "Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row",
        "url": "https://urgent.news/2026/11/10/microsofts-patch-tuesday-surpasses-1-000-bugs-for-second-month-in-a",
        "published": "2026-11-10T20:55:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}