Skip to content
A detailed explainer is available in Japanese. Read the Japanese explainer
Critical 9.8

Windowsの脆弱性12件、全件CVSS 9.8で修正版あり

CVE-2026-112967 First seen on SecPulse

Summary

Windowsの12件の脆弱性が2026年11月10日に公表され、いずれもCVSS v3は9.8で、うち11件は認証なしのコード実行です。Windows 10・11とWindows Server 2016・2019を使う組織は、修正版を適用してください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

Windowsの12件の脆弱性が2026年11月10日に公表され、いずれもCVSS v3は9.8で、うち11件は認証なしのコード実行です。Windows 10・11とWindows Server 2016・2019を使う組織は、修正版を適用してください。

Affected packages

PackageAffected → Fixed
MicrosoftWindows 10 Version 1809
≥ 10.0.17763.0, < 10.0.17763.9487→ 10.0.17763.9487
MicrosoftWindows 10 Version 21H2
≥ 10.0.19044.0, < 10.0.19044.7846→ 10.0.19044.7846
MicrosoftWindows 10 Version 22H2
≥ 10.0.19045.0, < 10.0.19045.7846→ 10.0.19045.7846
MicrosoftWindows 11 Version 23H2
≥ 10.0.22631.0, < 10.0.22631.7711→ 10.0.22631.7711
MicrosoftWindows 11 Version 24H2
≥ 10.0.26100.0, < 10.0.26100.9974→ 10.0.26100.9974
MicrosoftWindows 11 Version 25H2
≥ 10.0.26200.0, < 10.0.26200.9974→ 10.0.26200.9974
MicrosoftWindows 11 version 26H1
≥ 10.0.28000.0, < 10.0.28000.3501→ 10.0.28000.3501
MicrosoftWindows 11 Version 26H2
≥ 10.0.26300.0, < 10.0.26300.9974→ 10.0.26300.9974
Original description The description as published by the source.

Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

Source: Microsoft Security Response Center Blog NVD GitHub Advisory

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details