Tenable Blog سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۲۲:۳۱

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

63Critical1029Important1Moderate0LowMicrosoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026.Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as important, and one rated as moderate.This month’s update includes patches for 287 products and components. The following table lists the products with the most CVEs patched this month. A full list of patche…

Vulnerabilities & Zero-Day Phishing Cloud Security AI Security IoT & OT Security AI & Machine Learning Programming & Languages Mobile Development Databases Cloud Computing DevOps & Infrastructure Networking & Internet Operating Systems UX/UI & Product Design Identity & Access Security Storage & Backup

Read the full article at Tenable Blog Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

NCSC Netherlands سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۲۳:۰۸

NCSC-2026-0473 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Tools

Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade zoals benoemd in onderstaande tabel. De vereiste voorwaarden voor succesvol misbruik verschillen per kwetsbaarheid. Afhankelijk van de kwetsbaarheid kan misbruik gebruikersinteractie vereisen, zoals het openen of verwerken van ee…

Vulnerabilities & Zero-Day Cloud Computing DevOps & Infrastructure

Source

BleepingComputer سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۲۳:۰۱

Hackers exploit trusted AWS access to breach multiple cloud environments

A threat actor used compromised identity and access management (IAM) credentials for a Qubole big data platform's AWS account to access and exfiltrate data from multiple customers' AWS environments. [...]

Data Breach Threat Intelligence Data Science & Analytics

Source

NCSC Netherlands سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۲۲:۵۳

NCSC-2026-0472 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows

Microsoft heeft kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden mogelijk misbruiken om beveiligingsmaatregelen te omzeilen, privileges te verhogen, willekeurige code uit te voeren en/of toegang te verkrijgen tot gevoelige informatie. De 13 ernstigste kwetsbaarheden bevinden zich in verschillende Windows-componenten en hebben een CVSS-score van 9,0 of hoger. Afhankelijk van de betreffende…

Vulnerabilities & Zero-Day Networking & Internet Operating Systems

Source

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۲۲:۵۳

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw, tracked as CVE-2026-111760, is an integer truncation in how Git handles its index. An

Vulnerabilities & Zero-Day

Source