Microsoft November patches fix 1,094 bugs, one exploited
CVE-2026-124194 can leak an Outlook user’s NTLMv2 hash; two zero-click remote code execution bugs also ship.
78
Product
Outlook
- Mentions · 7d12
- Mentions · 30d18
- All mentions28
- First seenSep 8, 2026
- Last mentioned3h ago
Timeline
28 articles · newest firstMicrosoft November patches include exploited Outlook flaw CVE-2026-124194
The release covers 1,093 flaws, 63 rated critical, plus Exchange, SharePoint, Windows Search, and LDAP bugs.
78
Microsoft patches nearly 1,100 flaws, including exploited Outlook bug
CVE-2026-124194 is the only flaw Microsoft says is already exploited; 63 of this month's fixes are rated critical.
76
Microsoft November patches list 1,094 CVEs; one Outlook flaw exploited
CISA added the exploited Outlook spoofing bug to KEV; a Windows Search flaw is called zero-click code execution.
74
Microsoft Patch Tuesday discloses 1,093 bugs, including exploited Outlook flaw
CISA ordered agencies to patch exploited Outlook, Barracuda and other bugs, with Outlook due by month’s end.
78
Microsoft releases Windows 10 KB5131096 extended security update
The update reaches build 19045.7846, or 19044.7846 on Enterprise LTSC 2021, and includes November Patch Tuesday fixes.
64
Exploited Outlook zero-day among 1,094 flaws patched by Microsoft
The moderate CVSS 6.5 flaw, CVE-2026-124194, leaks an NTLMv2 hash when a user opens a crafted message file.
76
Microsoft November patches cover 1,260 flaws, one Outlook bug exploited
SANS says 68 issues are critical and CVE-2026-124194, an Outlook spoofing bug, is already exploited.
76
November Patch Tuesday fixes 1,235 flaws and an Outlook zero-day
Opening a crafted Outlook message can leak an NTLMv2 hash to an attacker-controlled share.
78
ZDI lists November 2026 Microsoft fixes, one Outlook bug exploited
CVE-2026-124194 is the only listed flaw marked exploited; it is a Moderate CVSS 6.5 spoofing bug.
74
Microsoft November 2026 update fixes 1,093 flaws, one Outlook zero-day
Opening a crafted file can leak an NTLMv2 hash; the Preview Pane is not an attack vector.
74
Microsoft consumer mail rejects legitimate messages lacking DMARC
Bounces citing 550 5.7.1 or 550 5.7.23 began November 5 and also hit small senders.
64
Now You Can Invite Anyone to a WhatsApp Call
WhatsApp now lets hosts invite account-free guests to encrypted calls of up to 32 people.
8
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
Microsoft's October 2026 Patch Tuesday fixes 1,411 CVEs, including one actively exploited Windows Shell bypass.
84
ClickFix to BEC in 24 Hours: Tragic Quadrant | Huntress
Huntress shows ClickFix and a malicious custom GPT stealing a Microsoft 365 cookie to enable BEC within a day.
55
Researchers Discover New Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections
Researchers showed IDN lookalike domains can evade Chrome’s Unicode display and near-match phishing warnings.
60
New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing
Researchers showed Chromium can display Unicode brand lookalike domains as readable text, bypassing Punycode warnings.
58
Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access
Huntress found a Power BI phishing campaign that installs rogue ScreenConnect clients for persistent Windows access.
62
Microsoft Outlook to block MSIX attachments starting November
Microsoft will block .msix and .msixbundle attachments in Outlook on the web and new Outlook starting November.
42
Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
Huntress reports phishing that abuses Microsoft Power BI links to install rogue ScreenConnect RMM clients.
61
Microsoft extends the Outlook naughty step with two more file types
Microsoft will block .msix and .msixbundle attachments in New Outlook for Windows and Outlook on the web.
34
Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel
China-linked UAT-11587 used the Antino backdoor and Microsoft 365 to spy on Asian governments.
78
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
Cisco Talos says China-nexus UAT-11587 deployed the Antino backdoor against Asian government and policy organizations.
78
Microsoft thinks its new Copilot ‘super app’ will be as influential as Office
Microsoft unveiled a Copilot super app bundling chat, coding, and Autopilot agents with usage-based enterprise billing.
72
Improving email security outcomes with real-world Microsoft Defender insights
Microsoft's quarterly benchmark claims Defender missed 55.4% fewer high-severity email threats than the next-closest secure email gateway.
25
Microsoft says Copilot buttons still missing in classic Outlook
Microsoft is still investigating a bug that makes Copilot buttons disappear in classic Outlook for affected M365 Copilot users.
12
Microsoft fixes Teams, Outlook launch failures on ARM Windows PCs
Microsoft fixed in KB5124012 a bug stopping Teams and new Outlook from launching on ARM Windows 11 PCs.
8
AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
Huntress maps AD RMS architecture and recon paths, setting up an offline key-extraction attack against its unrotatable 255-year root key.
55
Related CVEs
by mentions- Missing unsafe-action warning in Microsoft Office Outlook
- Unauthenticated remote code execution in Windows LDAP
- Unauthenticated privilege elevation in Azure Managed Grafana
- Out-of-bounds write RCE in Windows Search Component
- Missing authentication in Azure OpenAI enables privilege elevation
- Heap buffer overflow in Microsoft Outlook via network
- Use-after-free in Microsoft Office Outlook
- Null pointer dereference RCE in Microsoft Defender
- Authenticated remote code execution in Exchange Server
- Invalid pointer release allows code execution in Outlook
Appears with
- Microsoftvendor · 27
- Windowsproduct · 9
- Microsoftorganization · 5
- Googlevendor · 5
- Microsoft 365product · 4
- Huntressorganization · 3
- CISAorganization · 3
- Chromeproduct · 3
- Exchange Serverproduct · 3
- Microsoft 365 Apps for Enterpriseproduct · 3
- Microsoft Defenderproduct · 2
- Azure OpenAIproduct · 2
- Office LTSC 2021product · 2
- SharePointproduct · 2
- Officeproduct · 2
- Have I Been Squattedorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.