Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day

Key Points:

• Microsoft’s November 2026 Patch Tuesday addresses a record 1,235 vulnerabilities, including 66 critical flaws such as 48 Remote Code Execution (RCE) and 15 Elevation of Privilege (EoP) issues, with approximately 639 affecting Windows products.
• The update fixes an actively exploited zero-day vulnerability in Microsoft Outlook (CVE-2026-124194) that allows attackers to steal NTLM authentication hashes via malicious email attachments, potentially enabling unauthorized access to corporate accounts.
• This Patch Tuesday follows October’s record-breaking 1,411 flaw fixes, highlighting Microsoft’s continued use of AI to identify and patch security issues.
• Other major vendors also released security updates in November 2026, including Cisco, Google, Barracuda Networks, Ivanti, SonicWall, SAP, and Zyxel, addressing critical vulnerabilities and zero-day exploits across various products and platforms.
• Additional non-security updates were released for Windows 10 and Windows 11, with detailed coverage available for the latest cumulative updates KB5132061, KB5131087, and KB5131096.