4 reportsPriority High
November 2026 Patch Tuesday vulnerability updates
A major software update cycle has been released with over 1,000 security flaws addressed, including one unpatched zero-day vulnerability that could be exploited by attackers.
First report Latest
What is going on
- November 2026 Patch Tuesday included 1,252 CVEs with 68 critical vulnerabilities and one zero-day vulnerability.
- Security updates were released to address these flaws, with organisations advised to review their software estates to determine if mitigation or patching is required.
- One zero-day vulnerability was reported to be exploited in the wild, though no specific details about the exploit have been confirmed.
- The vulnerability landscape remains active with multiple security updates and ongoing monitoring recommended for affected systems.
- What to watch: Further confirmation of the zero-day's exploitation method and affected systems would change the current understanding of the risk.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType Vulnerability
November 2026 Patch Tuesday: 1,252 CVEs Include One Zero-Day and 68 Critical Vulnerabilities
- Priority LowType Vulnerability
November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far
- Priority HighType VulnerabilityLead report
BeyondTrust Zero-Day CVE-2026-102764: China APT, CVSS 9.3
- Priority LowType Vulnerability
Google Patches Critical Chrome Zero-Day Exploiting XML Vulnerability

