Microsoft
This is rated high severity (8.1 out of 10). There is no confirmed exploitation of it yet. Ask IT whether the affected products are in your estate.
Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.
Exploitable over the network without any account, under specific conditions, and no one has to click or open anything. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Impact
Longer bar: more harm
1 link from the CVE record, grouped by site.
msrc.microsoft.com1 link
Microsoft is publishing 1,092 own-product vulnerabilities on November 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Known-exploited catalogue reports exploitation in the wild.
Next step: Confirm whether Microsoft 365 Apps is in your estate.
