Reported by 3 outlets
The story so far
AI summary of the reporting below · Updated · How we work
Microsoft rolled out its November 2026 Patch Tuesday updates to address over a thousand security vulnerabilities across its product ecosystem, headlined by a fix for an actively exploited zero-day flaw in Microsoft Outlook. Outlets reported varying counts for the total scope of the patch bundle, with SecurityWeek tallying 1,094 resolved flaws while BleepingComputer placed the figure at 1,235. [2][3]
The confirmed zero-day bug, tracked as CVE-2026-124194, is classified as a Microsoft Outlook spoofing vulnerability that Microsoft acknowledges has seen active exploitation. When connecting, Windows can automatically try to authenticate with a remote server, which exposes the targeted user's NTLMv2 authentication hash and allows an attacker to capture and potentially crack it offline. [2][3]
Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability.
via BleepingComputerCVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation.
via SecurityWeek
With the November Patch Tuesday rollout, you can finally customize your right-click menu in Windows 11. It fixes 1,094 security flaws, too.
via ZDNET