Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day

By Lawrence Abrams

AI Summary

Microsoft's November 2026 Patch Tuesday set a new record with 1,235 security fixes, including an actively exploited zero-day in Microsoft Outlook (CVE-2026-124194). The release covers critical flaws across Windows, Exchange, SharePoint, LDAP, and Windows Search, making this the second consecutive month exceeding 1,000 CVEs. Security teams should prioritize the Outlook zero-day and critical Exchange/SharePoint bugs for immediate patching.

Read full article → https://www.bleepingcomputer.com/news/microsoft/mi…

Relevance score: 92.0/100

# More from November 11

2
France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites The Hacker News
3
N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits The Hacker News
4
Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers The Hacker News
5
New OpenSSH Vulnerability Schneier on Security
6
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution The Hacker News
7
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access The Hacker News
8
Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 The Hacker News
9
Japanese furniture giant Nitori says hackers stole 37.6M customer records BleepingComputer
10
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones The Hacker News