# Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Source: [The Hacker News](https://thehackernews.com/2026/11/microsoft-patches-1259-flaws-including.html) · 2026-11-11 · Security
Page: https://themorning.dev/story/microsoft-patches-1-259-flaws-including-exploited-outlook-bug-that-may-expose-nt-44096b209ce3f997
Kind: security · Impact: high

## In brief

- Microsoft's November 2026 Patch Tuesday fixed more than 1,000 vulnerabilities, the second consecutive month above that level.
- Microsoft says one flaw, CVE-2026-124194 in Outlook, is under active exploitation and has been patched.
- Sources report different totals, from about 1,093 to 1,260 flaws, and 63 to 68 critical ones, so counts vary by source.

## Why it matters

Administrators and developers need to patch the actively exploited Outlook flaw quickly, and the very large batch of fixes (including many critical Exchange, SharePoint, Windows Search and LDAP bugs) makes prioritisation difficult.

## What to do

- Install the November 2026 Patch Tuesday updates
- Prioritise patching the exploited Outlook zero-day CVE-2026-124194
- Prioritise the critical Exchange, SharePoint, Windows Search and LDAP fixes

## Versions

- Windows 10 KB5131096

## CVEs

- CVE-2026-124194

## Timeline

- 2026-11-10: Microsoft released November 2026 Patch Tuesday updates, including fixes for an exploited Outlook zero-day
- 2026-11-10: Microsoft released the Windows 10 KB5131096 extended security update with the November fixes

## Coverage

- [Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes](https://thehackernews.com/2026/11/microsoft-patches-1259-flaws-including.html) — The Hacker News, 2026-11-11
- [Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities](https://blog.talosintelligence.com/microsoft-patch-tuesday-for-november-2026/) — Cisco Talos Blog, 2026-11-11
- [November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far](https://www.theregister.com/security/2026/11/10/november-patch-tuesday-boasts-over-1000-bugs-but-only-one-zero-day-so-far/5308946) — www.theregister.com - Articles, 2026-11-10
- [November Patch Tuesday: An Overflowing Cornucopia of CVEs](https://www.darkreading.com/vulnerabilities-threats/november-patch-tuesday-cornucopia-cves) — darkreading, 2026-11-10
- [Patch Tuesday - November 2026](https://www.rapid7.com/blog/post/em-patch-tuesday-november-2026) — Rapid7 Cybersecurity Blog, 2026-11-10
- [Microsoft Fixes Nearly 1,100 Security Vulnerabilities](https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities/) — Krebs on Security, 2026-11-10
- [Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday](https://cyberscoop.com/microsoft-patch-tuesday-november-2026/) — CyberScoop, 2026-11-10
- [Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row](https://therecord.media/patch-tuesday-microsoft-1000-bugs-again) — The Record from Recorded Future News, 2026-11-10
- [Microsoft releases Windows 10 KB5131096 extended security update](https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5131096-extended-security-update/) — BleepingComputer, 2026-11-10
- [Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft](https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/) — SecurityWeek, 2026-11-10
- [Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th)](https://isc.sans.edu/diary/rss/33508) — SANS Internet Storm Center, InfoCON: green, 2026-11-10
- [Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day](https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/) — BleepingComputer, 2026-11-10

Tags: patch-tuesday, microsoft, zero-day, outlook, vulnerabilities, windows

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev