November 2026 Patch Tuesday lists dozens of Microsoft flaws
The excerpt lists 57 CVEs, including CVSS 9.8 remote code execution bugs rated exploitation less likely.
66
CVE-2026-84005
Local info disclosure in AMD Zen via security-critical code removal
- CVSS 3.1
- 5.5 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Processor optimization can remove or modify security-critical code in AMD Zen, exposing information. An authorized local user with low privileges can trigger it without user interaction and learn confidential data. Integrity and availability are not affected. Affected AMD Zen versions and a fix are not stated.
What to do: No fixed version is stated. Apply AMD or the platform vendor’s update for CVE-2026-84005 when one is published.
| Product | Affected |
|---|---|
| AMD Zen | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
- Weakness
- CWE-1037
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
In the news
2 storiesMicrosoft November 2026 Patch Tuesday covers dozens of Windows flaws
The visible Rapid7 list includes several 9.8 remote code execution bugs; each entry is marked not publicly disclosed.
58