# Patch Tuesday - November 2026

Source: [Rapid7 Cybersecurity Blog](https://www.rapid7.com/blog/post/em-patch-tuesday-november-2026) · 2026-11-10 · Security
Page: https://themorning.dev/story/patch-tuesday-november-2026-d58e1f007a51618c
Kind: security · Impact: high

## In brief

- Microsoft's November 2026 Patch Tuesday fixes over 1,000 flaws, with sources reporting counts from about 1,090 to 1,260 because the totals differ between outlets.
- Microsoft says it is aware of active exploitation of an Outlook zero-day, CVE-2026-124194.
- Sources say the release includes critical flaws in Exchange, SharePoint, Windows Search and LDAP, plus Chromium issues affecting Microsoft Edge.

## Why it matters

An actively exploited Outlook zero-day is a live risk, and the volume of patches makes it harder for administrators to prioritise quickly.

## What to do

- Install the November 2026 Patch Tuesday updates, starting with the Outlook fix for CVE-2026-124194.
- Prioritise the critical Exchange, SharePoint, Windows Search and LDAP fixes named in the sources.

## Versions

- Windows 10 KB5131096

## CVEs

- CVE-2026-124194

## Timeline

- 2026-11-10: Microsoft releases November 2026 Patch Tuesday updates, including the fix for the exploited Outlook zero-day

## Coverage

- [November Patch Tuesday: An Overflowing Cornucopia of CVEs](https://www.darkreading.com/vulnerabilities-threats/november-patch-tuesday-cornucopia-cves) — darkreading, 2026-11-10
- [Patch Tuesday - November 2026](https://www.rapid7.com/blog/post/em-patch-tuesday-november-2026) — Rapid7 Cybersecurity Blog, 2026-11-10
- [Microsoft Fixes Nearly 1,100 Security Vulnerabilities](https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities/) — Krebs on Security, 2026-11-10
- [Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday](https://cyberscoop.com/microsoft-patch-tuesday-november-2026/) — CyberScoop, 2026-11-10
- [Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row](https://therecord.media/patch-tuesday-microsoft-1000-bugs-again) — The Record from Recorded Future News, 2026-11-10
- [Microsoft releases Windows 10 KB5131096 extended security update](https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5131096-extended-security-update/) — BleepingComputer, 2026-11-10
- [Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft](https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/) — SecurityWeek, 2026-11-10
- [Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th)](https://isc.sans.edu/diary/rss/33508) — SANS Internet Storm Center, InfoCON: green, 2026-11-10
- [Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day](https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/) — BleepingComputer, 2026-11-10

Tags: patch-tuesday, microsoft, zero-day, outlook, windows, vulnerability

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev