November 2026 Patch Tuesday lists dozens of Microsoft flaws
The excerpt lists 57 CVEs, including CVSS 9.8 remote code execution bugs rated exploitation less likely.
66
CVE-2026-84004
Local information disclosure in AMD Zen processors
- CVSS 3.1
- 5.5 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Processor optimization can remove or modify security-critical code on AMD Zen CPUs, letting an authorized local user disclose information. The attacker needs low privileges and no user interaction. Impact is limited to confidentiality. Affected builds and a fixed version are not stated.
What to do: No fixed version is stated. Apply the vendor update for CVE-2026-84004.
| Product | Affected |
|---|---|
| AMD Zen | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
- Weakness
- CWE-1037
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
In the news
2 storiesMicrosoft November 2026 Patch Tuesday covers dozens of Windows flaws
The visible Rapid7 list includes several 9.8 remote code execution bugs; each entry is marked not publicly disclosed.
58