cyber.hendryadrian.com
Security News · cyberscoop.com

Microsoft patches 1,094 vulnerabilities in November 2026 update

· Original article ↗

Summary

Microsoft’s November update lists 1,094 CVEs. One flaw, an Outlook spoofing vulnerability, was under active attack; none were publicly known before release. The article also highlights severe Windows Search and LDAP flaws.

Key points

  • The update addresses 1,094 CVEs across Windows, Office, Azure and other Microsoft products.
  • Windows accounts for 726 listed vulnerabilities and Office for 174.
  • One flaw was under active attack at release, and none were publicly known beforehand.
  • CVE-2026-124194 is an Outlook spoofing flaw that can make Outlook connect to an attacker-controlled network location without its usual external-content warning; CISA added it to the KEV list.
  • CVE-2026-116928 is a severe Windows Search vulnerability reachable through Exchange Server; Dustin Childs described it as a zero-click code execution bug.
  • Childs also highlighted a Windows LDAP flaw rated 9.8 and said it could be particularly destructive on Domain Controllers.

Article Details

Event Type
Microsoft released its November security update addressing 1,094 vulnerabilities across its product lines.
Impact
The update included fixes for 726 Windows CVEs and 174 Office CVEs. One flaw, CVE-2026-124194, was under active attack; it is an Outlook spoofing vulnerability that can make Outlook connect to an attacker-controlled network location without the usual external-content warning. CVE-2026-116928 was described as a severe, zero-click code execution vulnerability in Windows Search reachable through Exchange Server. None of the vulnerabilities were publicly known before the release.

CVE

CVE-2026-116928Microsoft · Windows 10 Version 1607; Microsoft · Windows 10 Version 1809; +14 moreThe most severe fixes include CVE-2026-116928, a Windows Search vulnerability reachable through Exchange Server.CVE-2026-124194Microsoft · Microsoft 365 Apps for Enterprise; Microsoft · Microsoft Office LTSC 2021; +1 moreThe exploited zero-day flaw, CVE-2026-124194, is an Outlook spoofing vulnerability.

People

Dustin ChildsHead of threat awareness at TrendAI’s Zero Day Initiative; analyzed the updates and commented on the shift in observed exploitation.

Vendors

MicrosoftMicrosoft’s November security update addresses roughly 1,090 vulnerabilities across Windows, Office, Azure and the company’s other product lines, the second consecutive monthly release to exceed the totals of all

Products

AzureMicrosoft’s November security update addresses roughly 1,090 vulnerabilities across Windows, Office, Azure and the company’s other product lines, the second consecutive monthly release to exceed the totals of allMicrosoft Exchange ServerA smaller number of patches went to SQL Server, Exchange Server, SharePoint Server, Azure and other products.Microsoft WindowsMicrosoft’s November security update addresses roughly 1,090 vulnerabilities across Windows, Office, Azure and the company’s other product lines, the second consecutive monthly release to exceed the totals of allOfficeMicrosoft’s November security update addresses roughly 1,090 vulnerabilities across Windows, Office, Azure and the company’s other product lines, the second consecutive monthly release to exceed the totals of allOutlookThe exploited zero-day flaw, CVE-2026-124194, is an Outlook spoofing vulnerability.SharePoint ServerA smaller number of patches went to SQL Server, Exchange Server, SharePoint Server, Azure and other products.SQL ServerA smaller number of patches went to SQL Server, Exchange Server, SharePoint Server, Azure and other products.

Related Articles