November 2026
Microsoft shipped 93 fixes in its November 2026 security updates. 1 are Critical severity, under active exploitation, or were publicly disclosed before a fix shipped — those are listed below. The rest: 67 fixes to open-source packages bundled for Microsoft’s Azure Linux container distro, 25 Chromium fixes shipped through Microsoft Edge, and 0 lower-severity, non-exploited, non-publicly-disclosed fixes to Microsoft products — are counted here but not listed row by row.
Updated
Built by Daily CISO from Microsoft’s own update guide for this release (initial release November 4, 2026, last revised November 7, 2026); not an official Microsoft page. The full 93-fix list, including every Azure Linux and Edge/Chromium entry, is on Microsoft’s own page, linked above.
CVE-2026-109469: Entra Device Registration Elevation of Privilege Vulnerability
Critical
Entra Device Registration
CVSS 10.0 · Microsoft says no customer action required