Summary

Microsoft has released the November security update for Exchange Server SE. The update closes nine vulnerabilities, one of which Microsoft classifies as „Critical.“ This is the first Patch Tuesday on which only Exchange Server SE receives an update. Affected versions: The security update is only available for the following Exchange Server SE versions: No further updates for Exchange 2016 and...…

For more information, read the full story at the original source: Franky's Web (Exchange) ↗

Vulnerabilities in this story

• CVE-2026-118149 Microsoft Exchange Server 8.8High
• CVE-2026-118150 Microsoft Exchange Server 8.8High
• CVE-2026-118154 Microsoft Exchange Server 8.8High
• CVE-2026-118207 Microsoft Exchange Server 8.8High
• CVE-2026-118153 Microsoft Exchange Server 7.5High
• CVE-2026-118151 Microsoft Exchange Server 7.2High
• CVE-2026-118157 Microsoft Exchange Server 7.2High
• CVE-2026-118208 Microsoft Exchange Server 7.1High
• CVE-2026-118152 Microsoft Exchange Server 6.5Medium

Also reported by

• Dark Reading: November Patch Tuesday: An Overflowing Cornucopia of CVEs ↗
• Krebs on Security: Microsoft Fixes Nearly 1,100 Security Vulnerabilities ↗
• SecurityWeek: Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft ↗
• BleepingComputer: Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day ↗
• Malwarebytes Labs: Update Chrome now to fix a flaw attackers are exploiting ↗