3 reportsPriority High
November Patch Tuesday zero-day vulnerability
A zero-day vulnerability disclosed during November Patch Tuesday poses potential risks to organisations using affected software.
First report Latest
What is going on
- A zero-day vulnerability was disclosed during November Patch Tuesday with a CVSS score of 9.3.
- The vulnerability, CVE-2026-102764, has been reported to be exploited in the wild by a China APT group.
- Google also patched a critical Chrome zero-day exploiting an XML vulnerability that may affect organisations.
- November Patch Tuesday addressed over 1,000 bugs with only one zero-day reported so far.
- Organisations are advised to confirm if affected software is present in their estate before taking action.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType Vulnerability
November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far
- Priority HighType VulnerabilityLead report
BeyondTrust Zero-Day CVE-2026-102764: China APT, CVSS 9.3
- Priority LowType Vulnerability
Google Patches Critical Chrome Zero-Day Exploiting XML Vulnerability