Microsoft November 2026 patches fix 1095 flaws, one exploited
Only CVE-2026-124194, an Outlook spoofing bug scored 6.5, is exploited; 48 of 64 critical issues are remote code execution.
78
Product
Office Outlook
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 10, 2026
- Last mentioned2h ago
Timeline
2 articles · newest firstCISA KEV lists Outlook spoofing flaw CVE-2026-124194
An unauthorized attacker can spoof over the network without the expected user interaction; deadline is November 24.
74
Related CVEs
by mentions- Missing unsafe-action warning in Microsoft Office Outlook
- Use-after-free in Microsoft Office Word
- Use-after-free in Microsoft Office Outlook
- Use-after-free in Microsoft Office via user interaction
- Local privilege escalation via heap overflow in Windows Hyper-V
- Uninitialized resource privilege escalation in Windows Hyper-V
- Uninitialized resource RCE in Microsoft Office Word
- Use-after-free privilege escalation in Windows Hyper-V
- Privilege escalation in Active Directory Domain Services
- Use-after-free local privilege escalation in Windows Hyper-V
Appears with
- Microsoftvendor · 2
- Microsoft Officeproduct · 1
- Windows Hyper-Vproduct · 1
- Cisco Talosorganization · 1
- CISAorganization · 1
- Azure Managed Grafanaproduct · 1
- Windowsproduct · 1
- Exchange Serverproduct · 1
- Office Wordproduct · 1
- Active Directory Domain Servicesproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.