Summary

Microsoft November Patch Tuesday security updates fix 1,090 flaws, including one exploited Outlook bug and 30 potentially wormable issues. Microsoft November Patch Tuesday addressed about 1,090 new vulnerabilities, which is less than the roughly 1,400 last month. Two months in a row now exceed every previous year from Microsoft, and the overall count is a […]

For more information, read the full story at the original source: Security Affairs ↗

Vulnerabilities in this story

• CVE-2026-112967 Microsoft Windows 10, Microsoft Windows 11 EPSS 1.1% 9.8Critical
• CVE-2026-116928 Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server EPSS 1.1% 9.8Critical
• CVE-2026-119958 Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server EPSS 1.2% 9.8Critical
• CVE-2026-119990 Microsoft Azure Open AI EPSS 0.9% 9.8Critical
• CVE-2026-88243 Microsoft Windows Server EPSS 1% 9.8Critical
• CVE-2026-95882 Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server EPSS 0.9% 9.8Critical
• CVE-2026-96067 Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server EPSS 0.9% 9.8Critical
• CVE-2026-95962 Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server EPSS 0.7% 9.0Critical
• CVE-2026-116710 Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server EPSS 0.7% 8.1High
• CVE-2026-119952 Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server EPSS 0.8% 8.1High
• CVE-2026-81384 Microsoft Windows Server EPSS 0.6% 8.1High
• CVE-2026-124194 KEV · fix by 2026-11-24 Microsoft 365 Apps for Enterprise, Microsoft Office LTSC EPSS 1.6% 6.5Medium

Also reported by

• The Hacker News: Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes ↗
• Malwarebytes Labs: Microsoft Patch Tuesday fixes Outlook flaw already under attack ↗
• The Register: November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far ↗
• Dark Reading: November Patch Tuesday: An Overflowing Cornucopia of CVEs ↗
• Krebs on Security: Microsoft Fixes Nearly 1,100 Security Vulnerabilities ↗
• SecurityWeek: Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft ↗
• Franky's Web (Exchange): New security updates for Exchange Server (November 2026) ↗
• BleepingComputer: Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day ↗