Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Monthly Patch

November 2026 Monthly Patch

11 November 2026

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

The vulnerabilities that have been classified as Critical in severity are listed in the table below.

For the full list of security patches released by Microsoft, please refer to https://msrc.microsoft.com/update-guide/en-us/releaseNote/2026-Nov (opens in new tab)

Critical Vulnerabilities

CVE Number

CVE Name

Base Score

Reference

CVE-2026-109469

Entra Device Registration Elevation of Privilege Vulnerability

10.0

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-109469 (opens in new tab)

CVE-2026-112967

Windows Xbox Live Networking Service Remote Code Execution Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-112967 (opens in new tab)

CVE-2026-116928

Windows Search Remote Code Execution Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-116928 (opens in new tab)

CVE-2026-119958

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119958 (opens in new tab)

CVE-2026-119990

Azure OpenAI Elevation of Privilege Vulnerability

9.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119990 (opens in new tab)

CVE-2026-121126

Chromium CVE-2026-121126: Use after free

9.6

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-121126 (opens in new tab)

CVE-2026-121035

Chromium CVE-2026-121035: Use after free

9.6

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-121035 (opens in new tab)

CVE-2026-114169

Windows Raw Image Extension Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-114169 (opens in new tab)

CVE-2026-125136

Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-125136 (opens in new tab)

CVE-2026-118146

Windows Active Directory Domain Services Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118146 (opens in new tab)

CVE-2026-120005

Microsoft PowerPoint Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-120005 (opens in new tab)

CVE-2026-111285

Microsoft Office Word Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-111285 (opens in new tab)

CVE-2026-110067

Microsoft Office Word Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-110067 (opens in new tab)

CVE-2026-110047

Microsoft Office Word Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-110047 (opens in new tab)

CVE-2026-120003

Microsoft Office Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-120003 (opens in new tab)

CVE-2026-111289

Microsoft Office Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-111289 (opens in new tab)

CVE-2026-111309

Microsoft Office Outlook Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-111309 (opens in new tab)

CVE-2026-110068

Microsoft Office Outlook Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-110068 (opens in new tab)

CVE-2026-110043

Microsoft Office Outlook Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-110043 (opens in new tab)

CVE-2026-120789

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-120789 (opens in new tab)

CVE-2026-120788

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-120788 (opens in new tab)

CVE-2026-120786

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-120786 (opens in new tab)

CVE-2026-118730

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118730 (opens in new tab)

CVE-2026-118713

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118713 (opens in new tab)

CVE-2026-118711

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118711 (opens in new tab)

CVE-2026-118702

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118702 (opens in new tab)

CVE-2026-118701

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118701 (opens in new tab)

CVE-2026-118297

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118297 (opens in new tab)

CVE-2026-118296

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118296 (opens in new tab)

CVE-2026-118292

Microsoft Office Excel Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118292 (opens in new tab)

CVE-2026-118207

Microsoft Exchange Server Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118207 (opens in new tab)

CVE-2026-122194

Microsoft Defender Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-122194 (opens in new tab)

CVE-2026-119969

Graphic Fonts Remote Code Execution Vulnerability

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119969 (opens in new tab)

CVE-2026-121203

Chromium CVE-2026-121203: Use after free

8.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-121203 (opens in new tab)

CVE-2026-113753

Windows Hyper-V Elevation of Privilege Vulnerability

8.2

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113753 (opens in new tab)

CVE-2026-119952

Windows Schannel Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119952 (opens in new tab)

CVE-2026-113862

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113862 (opens in new tab)

CVE-2026-119964

Windows Message Queuing Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119964 (opens in new tab)

CVE-2026-119963

Windows Message Queuing Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119963 (opens in new tab)

CVE-2026-116710

Windows Message Queuing Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-116710 (opens in new tab)

CVE-2026-119967

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119967 (opens in new tab)

CVE-2026-109459

Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-109459 (opens in new tab)

CVE-2026-119961

Windows Internet Information Services Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119961 (opens in new tab)

CVE-2026-119951

Windows Deployment Services Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119951 (opens in new tab)

CVE-2026-119962

Windows CredSSP Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119962 (opens in new tab)

CVE-2026-118737

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118737 (opens in new tab)

CVE-2026-119382

Windows TPM Elevation of Privilege Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119382 (opens in new tab)

CVE-2026-119957

Windows Remote Desktop Services Elevation of Privilege Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119957 (opens in new tab)

CVE-2026-113865

Windows Hyper-V Elevation of Privilege Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113865 (opens in new tab)

CVE-2026-113856

Windows Hyper-V Elevation of Privilege Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113856 (opens in new tab)

CVE-2026-125137

Windows Graphics Kernel Elevation of Privilege Vulnerability

7.8

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-125137 (opens in new tab)

CVE-2026-113859

Windows TCP/IP Remote Code Execution Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113859 (opens in new tab)

CVE-2026-113825

Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113825 (opens in new tab)

CVE-2026-113752

Windows Print Spooler Components Remote Code Execution Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113752 (opens in new tab)

CVE-2026-119960

Windows Hyper-V Elevation of Privilege Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119960 (opens in new tab)

CVE-2026-119947

Windows Hyper-V Elevation of Privilege Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119947 (opens in new tab)

CVE-2026-113861

Windows Hyper-V Elevation of Privilege Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113861 (opens in new tab)

CVE-2026-119966

Windows Graphics Kernel Elevation of Privilege Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-119966 (opens in new tab)

CVE-2026-118145

Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118145 (opens in new tab)

CVE-2026-125134

Windows Function Discovery Resource Publication Remote Code Execution Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-125134 (opens in new tab)

CVE-2026-113749

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113749 (opens in new tab)

CVE-2026-124185

Microsoft Office Word Remote Code Execution Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-124185 (opens in new tab)

CVE-2026-124170

Microsoft Office Excel Remote Code Execution Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-124170 (opens in new tab)

CVE-2026-118148

Active Directory Domain Services Elevation of Privilege Vulnerability

7.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-118148 (opens in new tab)

CVE-2026-113860

Windows Hyper-V Elevation of Privilege Vulnerability

7.0

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113860 (opens in new tab)

CVE-2026-76024

Chromium CVE-2026-76024: Memory corruption

6.5

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-76024 (opens in new tab)

CVE-2026-113864

Windows Hyper-V Elevation of Privilege Vulnerability

6.4

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-113864 (opens in new tab)

CVE-2026-114160

Azure Managed Grafana Elevation of Privilege Vulnerability

TBD

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-114160 (opens in new tab)