Skip to the content
The Update Bureau

Monthly Patch Briefing

November 2026

39 updates released this month across 7 product lines · 21 Patch Tuesday · 6 out-of-band .

Release volume

39 updates released

37 fewer than October (76), vs 53/mo in 2026.

Nov 2026
39
Oct 2026
76
2026 average
53/mo

Security flaws fixed

824 vulnerabilities

-480 flaws compared to October (1,304).

Nov 2026
824
Oct 2026
1,304
2026 average
406/mo

Critical & urgent

49 critical

52 critical in October, plus 6 out-of-band releases this month .

Nov critical
49
Oct critical
52
2026 average
27/mo

2026 Year-to-Date Trend

4,465 security flaws fixed across 579 updates in 2026

300 critical flaws and 16 exploited zero-days patched across the 11 published months of 2026.

Distinct security flaws fixed per month Jan – Nov 2026
November 2026
Windows 11
Monthly security update
1 out-of-band 612 fixed 35 critical 1 with issues
612 fixed · 35 critical

Vulnerabilities fixed, by version

Product Version Monthly update & build Critical Important Total
Windows 11
Windows 11, version 26H2 KB5132061 26300.9974 34 561 595
Windows 11
Windows 11, version 26H1 KB5132059 28000.3501 33 564 598
Windows 11
Windows 11, version 25H2 KB5132061 26200.9974 34 561 595
Windows 11
Windows 11, version 24H2 KB5132061 26100.9974 34 561 595
Windows 11
Windows 11, version 23H2 KB5131087 22631.7711 31 543 575
Windows 10
Windows 10 Enterprise LTSC 2019 KB5131085 17763.9487 28 494 523
Windows 10
Windows 10 Enterprise LTSB 2016 KB5131291 14393.9688 24 429 453
Windows 10
Windows 10, version 22H2 KB5131096 19045.7846 30 516 547
Windows 10
Windows 10 Enterprise LTSC 2021 KB5131096 19044.7846 30 516 547
Windows Server
Windows Server 2025 KB5131080 26100.33822 33 594 628
Windows Server
Windows Server 2022 KB5131090 20348.5870 30 562 593
Windows Server
Windows Server 2019 KB5131085 17763.9487 28 532 561
Windows Server
Windows Server 2016 KB5131291 14393.9688 25 477 502
SQL Server
SQL Server 2025 KB5129299 17.0.5045.3 · 58 61
SQL Server
SQL Server 2022 KB5129300 16.0.4315.2 · 54 56
SQL Server
SQL Server 2019 KB5132745 15.0.4510.2 · 50 52
SQL Server
SQL Server 2017 KB5132746 14.0.3570.2 · 51 55
SharePoint Server
SharePoint Server Subscription Edition KB5002945 16.0.20326.20278 · 24 24
Office Online Server
Office Online Server KB5002946 16.0.10417.20236 11 45 58
Exchange Server
Exchange Server Subscription Edition KB5133453 15.2.2562.57 1 8 9

All updates

All updates:
  • Windows 11 · 23H2
    Windows 11 23H2 Windows 11 23H2 Out-of-band update
    Out-of-band
    KB5136483

    Windows licensing and activation failures fixed

    Some Windows licensing and activation tasks failed with error 0x80041008; the issue is fixed for affected organizations.

    Build 22631.7714
  • Windows 11 · Future platforms
    Windows 11 Windows 11 Insider Future platforms Insider Preview
    Experimental Channel
    Build 29708.1001

    Cloud rebuild reinstalls Windows even when a PC will not boot

    Cloud rebuild can reinstall Windows even when a PC will not boot, and personal Windows Hello PIN setup changes. These changes are rolling out to Insiders in the Experimental Channel.

    Changes 3 new · 2 improved · 2 fixes
  • Windows 11 · 26H1
    Windows 11 Windows 11 Insider 26H1 Insider Preview
    Experimental Channel
    Build 28120.3542

    Run dialog refresh and BitLocker PIN setup for standard users

    A refreshed Run dialog and BitLocker preboot PIN setup for standard users are rolling out to Experimental Channel Insiders; the PIN feature is for managed devices.

    Changes 2 new · 1 improved
  • Windows 11 · 26H1
    Windows 11 Windows 11 Insider 26H1 Insider Preview
    Beta Channel
    Build 28020.3532

    BitLocker PIN setup for standard users and a Remote Desktop fix

    Standard users on managed PCs can set a BitLocker preboot PIN, and a Remote Desktop connection failure is fixed. These changes are rolling out to Beta Channel Insiders.

    Changes 1 new · 1 fix
  • Windows 11 · 26H1
    Windows 11 Windows 11 Insider 26H1 Insider Preview
    Release Preview Channel
    Build 28000.3612

    File Explorer menus gain controls, and Cloud rebuild arrives

    File Explorer adds context menu controls, and Windows adds Cloud rebuild and new accessibility tools. These changes and several fixes are rolling out to Windows 11 version 26H1 Insiders in the Release Preview Channel.

    Package KB5132265
    Changes 17 new · 8 improved · 4 fixes
  • Windows 11 · 25H2
    Windows 11 Windows 11 Insider 25H2 Insider Preview
    Release Preview Channel
    Build 26200.10066

    Windows Search actions and fixes for Miracast and Android passkeys

    Windows Search gains quick actions and richer results, alongside accessibility and sign-in changes. Release Preview Insiders on Windows 11 versions 25H2 and 26H2 receive the build in gradual and normal rollouts.

    Package KB5132057
    Changes 14 new · 2 improved · 7 fixes
  • Windows 10 · 21H2, 22H2
    Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Out-of-band update
    Out-of-band Updated
    KB5136493

    Error 0x80041008 fixed for certain SLMGR licensing tasks

    Some organizations could see error 0x80041008 when using SLMGR for licensing or activation tasks; this update fixes the issue. It also improves checks for devices hosted on Azure.

    Builds 19044.7850 19045.7850
  • Windows 10 · 1809
    Windows 10 1809 Windows 10 1809 Out-of-band update Also for Windows Server
    Out-of-band Updated
    KB5136490

    SLMGR licensing and activation errors fixed

    Some Windows licensing and activation tasks no longer fail with error 0x80041008. The problem mainly affected organizations managing activation or product keys with commands.

    Build 17763.9488
  • Windows Server · 2025
    Windows Server 2025 Windows Server 2025 Out-of-band update
    Out-of-band
    KB5136489

    Fix addresses certain Windows licensing failures with error 0x80041008

    Some organizations can now complete certain Windows licensing and activation operations that previously failed. The fix mainly helps systems that use commands or automated processes to manage KMS activation and product keys.

    Build 26100.33828
    Known issues 1 open
  • Windows Server · 2022
    Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band Updated
    KB5136487

    SLMGR activation failures fixed for KMS and license tasks

    Some Windows licensing and activation commands that failed with error 0x80041008 now work again. The fix mainly matters to organizations managing KMS activation, product keys, or Windows licenses.

    Build 20348.5873
    Known issues 1 open
  • Windows Server · 2019
    Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band
    KB5136490

    SLMGR licensing failures with error 0x80041008 fixed

    Certain Windows licensing and activation operations using SLMGR might fail with error 0x80041008; this out-of-band update fixes the problem. It mainly affected organizations using SLMGR commands or automation.

    Build 17763.9488
  • SQL Server · CU11
    SQL Server 2025 CU11 SQL Server 2025 CU11 Cumulative update
    Updated
    KB5129223

    Parallel SESSION_CONTEXT queries can return wrong results

    Queries using SESSION_CONTEXT might return wrong results or create crash dump files when they run in parallel; this remains a known issue. CU11 includes 70 fixes for SQL Server 2025.

    Build 17.0.5065.9
    Known issues 1 open
  • SQL Server · CU28
    SQL Server 2022 CU28 SQL Server 2022 CU28 Cumulative update
    Updated
    KB5125472

    Replication safeguards, SQL engine fixes, and new link tools

    SQL Server 2022 CU28 adds replication and database safety checks, fixes a range of engine and integration issues, and adds tools for Azure SQL Managed Instance links. Queries using SESSION_CONTEXT in parallel plans might still return wrong results or cause access violations.

    Build 16.0.4325.4
    Known issues 1 open
  • Windows 11 · 24H2, 25H2, 26H2
    Windows 11 24H2 / 25H2 / 26H2 Windows 11 24H2 / 25H2 / 26H2 Security update
    Updated
    KB5132061

    Remote Desktop and USB audio fixes; NTLM signing strengthened

    Remote Desktop connections and some USB audio devices get fixes, while NTLM signing is enabled by default for more connections. The update also closes a publicly disclosed Brotli decoder flaw.

    Builds 26100.9974 26200.9974 26300.9974
    Security 595 CVEs 34 critical
    Known issues 1 open
  • Windows 11 · 26H1
    Windows 11 26H1 Windows 11 26H1 Security update
    Updated
    KB5132059

    NTLM signing becomes the default for client connections

    Security fixes cover Windows components, while NTLM clients now offer message signing by default for non-anonymous connections. USB audio startup, printer setup, and Remote Desktop certificate errors also get fixes.

    Build 28000.3501
    Security 598 CVEs 33 critical
  • Windows 11 · 23H2
    Windows 11 23H2 Windows 11 23H2 Security update
    Final update for this version Final update for this version Updated
    KB5131087

    NTLM signing defaults for non-anonymous connections

    NTLM clients offer message signing by default for non-anonymous connections, helping reduce relay risks. The update also fixes printer setup and a Remote Desktop policy issue.

    Build 22631.7711
    Security 575 CVEs 31 critical
    Replaced by KB5136483 →
  • Windows 10 · 21H2, 22H2
    Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
    Updated
    KB5131096

    PowerShell rejects some invalidly encoded signed scripts

    Stricter PowerShell signature checks might reject signed scripts with invalid UTF-8 encoding. The update also fixes printer setup and Remote Desktop problems.

    Builds 19044.7846 19045.7846
    Security 547 CVEs 30 critical
    Replaced by KB5136493 →
  • Windows 10 · 1809
    Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
    Updated
    KB5131085

    Cuba clock rules adjusted; printer and remote access failures fixed

    Cuba’s clock stays on UTC-04:00 through the 2026–2027 daylight-saving period, and the update fixes printer and remote access problems. It also includes security updates for Windows.

    Build 17763.9487
    Security 523 CVEs 28 critical
    Replaced by KB5136490 →
  • Windows 10 · 1607
    Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
    Final update for this version Final update for this version Updated
    KB5131291

    Message Queuing and Windows Search flaws patched

    Critical flaws in Message Queuing and Windows Search lead this release, alongside fixes for printing, Remote Desktop, and USB audio.

    Build 14393.9688
    Security 453 CVEs 24 critical
  • Windows Server · 2025
    Windows Server 2025 Windows Server 2025 Security update
    Updated
    KB5131080

    NTLM signing defaults strengthened; Exchange mail issues remain

    NTLM clients now offer message signing by default for non-anonymous connections, helping limit relay attacks. Some on-premises Exchange servers might still have email access or delivery problems.

    Build 26100.33822
    Security 628 CVEs 33 critical
    Known issues 1 open
    Replaced by KB5136489 →
  • Windows Server · 2022
    Windows Server 2022 Windows Server 2022 Security update
    Updated
    KB5131090

    Critical Windows Search remote-code flaw patched

    A critical Windows Search flaw and other serious security bugs get fixes, alongside Exchange, printer, and Remote Desktop repairs. Some Exchange and WSUS problems remain open.

    Build 20348.5870
    Security 593 CVEs 30 critical
    Known issues 1 open
    Replaced by KB5136487 →
  • Windows Server · 2019
    Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Updated
    KB5131085

    LDAP and Search flaws patched; Exchange mail restored

    Critical flaws in LDAP and Windows Search are patched, and on-premises Exchange sign-in and email delivery issues are resolved. NTLM clients now offer message signing by default for non-anonymous connections.

    Build 17763.9487
    Security 561 CVEs 28 critical
    Replaced by KB5136490 →
  • Windows Server · 2016
    Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
    Updated
    KB5131291

    Exchange mail issues resolved; NTLM signing strengthened

    Exchange servers can sign in to OWA and send mail again after the October update. Clients also offer NTLM signing by default for non-anonymous connections.

    Build 14393.9688
    Security 502 CVEs 25 critical
  • Exchange Server · RTM
    Exchange Server Subscription Edition RTM Exchange Server Subscription Edition RTM Security update
    Updated
    KB5133453

    Critical mail-server flaw patched; hybrid free/busy corrected

    A critical remote-code flaw in Exchange is patched. Hybrid users can also see correct free/busy details in classic Outlook.

    Build 15.2.2562.57
    Security 9 CVEs 1 critical
  • SQL Server · CU10 + GDR
    SQL Server 2025 CU10 + GDR SQL Server 2025 CU10 + GDR Security update
    Updated
    KB5129299

    Recovery monitoring queries can crash the database engine

    Queries against `sys.dm_exec_requests` might raise an access violation while a database is recovering. The release also fixes security flaws across SQL Server components.

    Build 17.0.5045.3
    Security 59 CVEs
    Known issues 1 open