Microsoft patches about 1,100 vulnerabilities, including one exploited Outlook flaw

Microsoft's November Patch Tuesday fixed roughly 1,100 vulnerabilities, 63 of them rated critical, with a single Outlook spoofing bug under active exploitation. The Stack reports the flaw, CVE-2026-124194, carries a moderate severity rating and that the batch declined from October's 1,408 fixes. Krebs on Security places the release alongside updates from Apple, Google, Mozilla and Adobe and cites CISA data showing 217 of about 95,000 CVEs assigned this year have been exploited.

• Microsoft released fixes for close to 1,100 vulnerabilities in its November Patch Tuesday, 63 of which were rated critical.· 2 sources
• Only one flaw, CVE-2026-124194, a spoofing bug in Microsoft Outlook, is being actively exploited; The Stack reports it was rated moderate severity, while Krebs on Security describes it as a zero-day.· 2 sources
• Krebs on Security reports simultaneous security updates from Apple, Google, Mozilla and Adobe, and cites Ivanti's Chris Goettl saying 217 of roughly 95,000 CVEs assigned this year are on CISA's Known Exploited Vulnerabilities list.· 1 source