Security · High impactFan score 65 · Tier A9 sources

Patch Tuesday - November 2026

The Brief · written from 9 sources

Microsoft's November 2026 Patch Tuesday fixes over 1,000 flaws, with sources reporting counts from about 1,090 to 1,260 because the totals differ between outlets.
Microsoft says it is aware of active exploitation of an Outlook zero-day, CVE-2026-124194.
Sources say the release includes critical flaws in Exchange, SharePoint, Windows Search and LDAP, plus Chromium issues affecting Microsoft Edge.

Why it matters

An actively exploited Outlook zero-day is a live risk, and the volume of patches makes it harder for administrators to prioritise quickly.

Who’s affected

Windows administrators
Outlook users
Exchange and SharePoint administrators

What to do

Install the November 2026 Patch Tuesday updates, starting with the Outlook fix for CVE-2026-124194.
Prioritise the critical Exchange, SharePoint, Windows Search and LDAP fixes named in the sources.

Windows 10 KB5131096
CVE-2026-124194
#patch-tuesday
#microsoft
#zero-day
#outlook
#windows
#vulnerability

Microsoft is publishing 1,092 own-product vulnerabilities on November 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Until a few months ago, these volumes would have been unimaginable, but if anything, this month feels like a slight reprieve. The jury is still…

Read the full story at rapid7.com ↗