International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 65 · Tier A12 sources

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

The Hacker News ·

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

The Brief · written from 12 sources

  • Microsoft's November 2026 Patch Tuesday fixed more than 1,000 vulnerabilities, the second consecutive month above that level.
  • Microsoft says one flaw, CVE-2026-124194 in Outlook, is under active exploitation and has been patched.
  • Sources report different totals, from about 1,093 to 1,260 flaws, and 63 to 68 critical ones, so counts vary by source.

Why it matters

Administrators and developers need to patch the actively exploited Outlook flaw quickly, and the very large batch of fixes (including many critical Exchange, SharePoint, Windows Search and LDAP bugs) makes prioritisation difficult.

Who’s affected

  • Organizations running Microsoft Windows, Office and Exchange
  • Microsoft Outlook users
  • Windows 10 extended security update customers

What to do

  1. Install the November 2026 Patch Tuesday updates
  2. Prioritise patching the exploited Outlook zero-day CVE-2026-124194
  3. Prioritise the critical Exchange, SharePoint, Windows Search and LDAP fixes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53…

Read the full story at thehackernews.com ↗

Timeline

  1. Microsoft released November 2026 Patch Tuesday updates, including fixes for an exploited Outlook zero-day

  2. Microsoft released the Windows 10 KB5131096 extended security update with the November fixes

  3. BleepingComputer

    Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day

  4. SANS Internet Storm Center, InfoCON: green

    Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th)

  5. SecurityWeek

    Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

  6. BleepingComputer

    Microsoft releases Windows 10 KB5131096 extended security update

  7. The Record from Recorded Future News

    Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row

  8. CyberScoop

    Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday

  9. Krebs on Security

    Microsoft Fixes Nearly 1,100 Security Vulnerabilities

  10. Rapid7 Cybersecurity Blog

    Patch Tuesday - November 2026

  11. darkreading

    November Patch Tuesday: An Overflowing Cornucopia of CVEs

  12. www.theregister.com - Articles

    November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far

  13. Cisco Talos Blog

    Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

  14. The Hacker News

    Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Full coverage · 12 sources

How do you feel about this?

0 Comments