430 matches found
Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for November 2026, which includes 1095 vulnerabilities affecting a range of products, including 64 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild...
CVE-2026-88212
Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-125136
Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-119821
Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-118736
Improper access control in Windows Network File System allows an authorized attacker to disclose information locally...
CVE-2026-108406
Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-105525
Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
EUVD-2026-122340
Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-119821
A local privilege escalation vulnerability exists in the Windows Network Connection Broker due to an improper authorization flaw. An authorized attacker can exploit this issue to elevate their privileges on the system. While the specific root cause is not detailed in the provided documents, the v...
CVE-2026-125136
A heap-based buffer overflow vulnerability exists in the Windows Network Connected Devices Auto-Setup Service . This flaw allows an unauthorized attacker to execute arbitrary code over an adjacent network . The issue is addressed in the November 10, 2026 security updates, including KB5131087 for ...
EUVD-2026-122238
Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network...
EUVD-2026-122123
Improper access control in Windows Network File System allows an authorized attacker to disclose information locally...
CVE-2026-118736
A vulnerability in the Windows Network File System allows an authorized attacker to perform a local information disclosure due to improper access control . This security issue is addressed in the November 10, 2026, cumulative security updates, such as KB5131080 , KB5131085 , KB5131087 , and KB513...
CVE-2026-88212
A Use after free vulnerability exists in Windows Network Address Translation (NAT) , which could allow an unauthorized attacker to execute code over an adjacent network . The vulnerability impacts the system's NAT component. While the provided documents do not specify the exact root cause or a de...
EUVD-2026-122022
Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-105525
A vulnerability exists in the Windows Network Connection Broker where an integer overflow or wraparound allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as an integer overflow (CWE-190) and potentially a Use After Free (CWE-416), t...
EUVD-2026-121984
Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-108406
A use after free vulnerability exists in the Windows Network Connection Broker , which could allow an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed, the provided documents do not specify the exact underlying component, version, or specific root c...
CVE-2026-113862
A Use after free vulnerability exists in Windows Network Address Translation (NAT) , which could allow an unauthorized attacker to execute code over a network. Technical details regarding the specific root cause are not provided in the documents. Remediation is available via official Microsoft se...
