Microsoft November 2026 patches fix 1095 flaws, one exploited
Only CVE-2026-124194, an Outlook spoofing bug scored 6.5, is exploited; 48 of 64 critical issues are remote code execution.
78
Product
Office Word
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenNov 11, 2026
- Last mentioned2h ago
Timeline
1 articles · newest firstRelated CVEs
by mentions- Heap buffer overflow in Microsoft Office via crafted content
- Use-after-free in Microsoft Office Outlook
- Use-after-free in Microsoft Office via user interaction
- Use-after-free in Microsoft Office Word
- Local privilege escalation via heap overflow in Windows Hyper-V
- Uninitialized resource privilege escalation in Windows Hyper-V
- Use-after-free privilege escalation in Windows Hyper-V
- Uninitialized resource RCE in Microsoft Office Word
- Privilege escalation in Active Directory Domain Services
- Use-after-free local privilege escalation in Windows Hyper-V
Appears with
- Office Outlookproduct · 1
- Microsoft Officeproduct · 1
- Windows Hyper-Vproduct · 1
- Cisco Talosorganization · 1
- Azure Managed Grafanaproduct · 1
- Microsoftvendor · 1
- Windowsproduct · 1
- Exchange Serverproduct · 1
- Active Directory Domain Servicesproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.