Microsoft Security Updates - November 2026
Roundup of Microsoft security advisories published in November 2026.
CVE search metadata
CVE search record: CVE-2026-58934. Severity: high. CVSS: 8.4. EPSS: 0.11%. KEV: no. Product: Windows. Brief: Microsoft Security Updates - November 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-11-microsoft-security-updates/
CVE search record: CVE-2026-109469. Severity: critical. CVSS: 10.0. KEV: no. Brief: Microsoft Security Updates - November 2026. Brief link: https://feed.craftedsignal.io/briefs/2026-11-microsoft-security-updates/
Triage facts
Revision 1- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 2, 21:54 UTC
- Vulnerabilities
- 2 CVEs
What's new
This roundup covers 1 Microsoft security vulnerabilities. None are reported as actively exploited at the time of release. The issues affect Windows.
Summary
| CVE | Product | Severity | CVSS | EPSS | KEV | Source |
|---|---|---|---|---|---|---|
| CVE-2026-58934 | Windows | no | NVD (authoritative) |
CVE-2026-58934
CVE-2026-58934 describes a logic error in the prepareWindowToDisplayDuringRelayout function within WindowState.java, which enables a local privilege escalation vulnerability. The flaw allows an attacker to bypass permission checks without requiring additional execution privileges or user interaction.
Affected products:
- Windows