Intel and AMD have together published more than 50 security advisories covering over 200 vulnerabilities in their processors, firmware and software, in a Patch Tuesday release on 11 November 2026. Fixes are available for most flaws, but not all: some AMD mitigations were released months ago, others are still in development, and Intel has discontinued one affected product. ## Intel: three critical flaws in TDX software Intel published 24 advisories describing just over 100 vulnerabilities, three rated critical and 20 rated high severity. The largest covers 30 flaws in the TDX Migration Trust Domain reference software, including three critical authentication issues that can be exploited for privilege escalation. One of them, [CVE-2026-61887](https://www.securityweek.com/chipmaker-patch-tuesday-over-200-vulnerabilities-addressed-by-intel-amd/), could also allow remote code execution. High-severity privilege escalation flaws were also fixed in Slim Bootloader, the UEFI firmware of two server boards and the VTune Profiler, alongside denial-of-service flaws in PROSet/Wireless WiFi and Bluetooth products. Intel is releasing no patches for three medium-severity bugs in BigDL, which has been discontinued, and advises users to stop using it. ## AMD: around 100 flaws, none rated critical AMD published 29 security bulletins and two security briefs covering roughly 100 unique CVEs, none rated critical. Graphics products account for the largest share, with one bulletin describing 44 issues affecting Radeon and Instinct products, ten rated high severity. AMD also disclosed a high-severity UEFI flaw that could let a privileged attacker run arbitrary code in System Management Mode, plus a Secure Debug Unlock bypass. Independent confirmation comes from [Qubes OS](https://www.qubes-os.org/news/2026/11/10/qsb-123/), which issued a bulletin on 10 November for two of the AMD CPU flaws, warning that a malicious virtual machine could compromise the host or leak data from other virtual machines. Some AMD fixes are not expected until as late as 2027.