Summary

CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation. The post Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft appeared first on SecurityWeek .

For more information, read the full story at the original source: SecurityWeek ↗

Vulnerabilities in this story

• CVE-2026-124194 KEV · fix by 2026-11-24 Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 6.5Medium

Also reported by

• The Register: November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far ↗
• Dark Reading: November Patch Tuesday: An Overflowing Cornucopia of CVEs ↗
• Krebs on Security: Microsoft Fixes Nearly 1,100 Security Vulnerabilities ↗
• Franky's Web (Exchange): New security updates for Exchange Server (November 2026) ↗
• BleepingComputer: Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day ↗
• Malwarebytes Labs: Update Chrome now to fix a flaw attackers are exploiting ↗