Microsoft November patches fix 1,090 flaws, one Outlook bug exploited
CVE-2026-124194 can leak an NTLMv2 hash if a user opens a crafted Outlook file; ZDI flags 30 wormable bugs.
78
CVE-2026-95882
Network stack buffer overflow in Windows DirectMusic
- CVSS 3.1
- 9.8 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A stack-based buffer overflow in Microsoft DirectMusic on Windows lets an unauthorized attacker run code over the network. No privileges or user interaction are required. Successful exploitation gives full control of confidentiality, integrity, and availability on the affected system. Microsoft has not listed affected builds.
What to do: Apply Microsoft's update for CVE-2026-95882. Microsoft has not named a fixed version or workaround.
| Product | Affected |
|---|---|
| Microsoft Windows DirectMusic | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
- Weakness
- CWE-121
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H