Microsoft’s November 2026 Patch Tuesday Fixes 1,235 Flaws, Including Exploited Outlook Zero-Day
Summary
Microsoft’s November 2026 updates address 1,235 flaws, including an actively exploited Outlook zero-day that can expose NTLM authentication hashes when a user opens a specially crafted message file.
Key points
- Microsoft says the updates address 1,235 vulnerabilities, including 66 rated Critical; approximately 639 affect Windows or Microsoft Windows products.
- CVE-2026-124194 is an actively exploited Microsoft Outlook spoofing zero-day.
- An unauthenticated attacker can send a specially crafted message file; if a user opens it, Outlook may connect to an attacker-controlled network location and disclose authentication information.
- The exposed NTLMv2 hash could potentially be captured and cracked offline, according to the article.
- Microsoft’s Patch Tuesday total excludes 108 flaws fixed earlier in the month.
Article Details
- Event Type
- Microsoft Patch Tuesday security updates
- Impact
- The updates address 1,235 flaws, including an actively exploited Outlook zero-day used to steal NTLM account hashes. Captured hashes may be cracked offline, potentially enabling unauthorized account access.
MITRE ATT&CK
CVE
Vendors
Products
Microsoft EdgeThis Patch Tuesday addresses 66 "Critical" vulnerabilities, 48 of which are Remote Code Execution (RCE), 15 are Elevation of Privilege (EoP), and three are Use-After-Free in Microsoft Edge.Microsoft OutlookToday is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability.Microsoft WindowsOf the 1,235 vulnerabilities, approximately 639 are categorized under Windows or Microsoft Windows products/components.