Microsoft November 2026 Patch Tuesday Fixes Record 1,235 Vulnerabilities Including Actively Exploited Outlook Zero-Day
Microsoft released its November 2026 Patch Tuesday updates addressing a record 1,235 vulnerabilities, including one actively exploited zero-day in Microsoft Outlook. The updates cover 66 Critical flaws, with 48 Remote Code Execution issues and multiple Elevation of Privilege vulnerabilities across Windows components and Microsoft Edge. The zero-day CVE-2026-124194 allows attackers to spoof messages that force Outlook to connect to attacker-controlled servers and leak NTLM hashes without user warnings. Approximately 639 flaws affect Windows products, while other vendors including Cisco, Google, Ivanti, SAP, and SonicWall also issued November security updates. Microsoft continues leveraging AI-driven vulnerability discovery following the previous month's record of 1,411 flaws.
BleepingComputerNov 10, 2026Translated from English