# Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row

Source: [The Record from Recorded Future News](https://therecord.media/patch-tuesday-microsoft-1000-bugs-again) · 2026-11-10 · Security
Page: https://themorning.dev/story/microsoft-s-patch-tuesday-surpasses-1-000-bugs-for-second-month-in-a-row-612ae5f08dba0aa0
Kind: security · Impact: high

## In brief

- Microsoft's November 2026 Patch Tuesday fixed more than 1,000 flaws; source counts vary from 1,093 (The Record) to 1,260 (SANS).
- Microsoft says it is aware of active exploitation of Outlook zero-day CVE-2026-124194.
- SANS reports 68 of the vulnerabilities are critical and 167 are Chromium issues affecting Microsoft Edge.
- Windows 10 extended security update KB5131096 includes the November 2026 fixes plus a few bug fixes and changes.

## Why it matters

The exploited Outlook zero-day makes this update a priority for anyone running Outlook. The sheer volume of fixes also means teams need to plan testing and deployment for a large patch batch.

## What to do

- Install the November 2026 Patch Tuesday updates, prioritising the Outlook fix for CVE-2026-124194
- Windows 10 systems enrolled in extended security updates can install KB5131096

## Versions

- Windows 10 KB5131096

## CVEs

- CVE-2026-124194

## Timeline

- 2026-11-10: Microsoft releases November 2026 Patch Tuesday fixes, including exploited Outlook zero-day
- 2026-11-10: Windows 10 KB5131096 extended security update released

## Coverage

- [Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row](https://therecord.media/patch-tuesday-microsoft-1000-bugs-again) — The Record from Recorded Future News, 2026-11-10
- [Microsoft releases Windows 10 KB5131096 extended security update](https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5131096-extended-security-update/) — BleepingComputer, 2026-11-10
- [Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft](https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/) — SecurityWeek, 2026-11-10
- [Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th)](https://isc.sans.edu/diary/rss/33508) — SANS Internet Storm Center, InfoCON: green, 2026-11-10
- [Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day](https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/) — BleepingComputer, 2026-11-10

Tags: patch-tuesday, microsoft, outlook, zero-day, windows, vulnerability

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev