Summary

Microsoft’s November 2026 Patch Tuesday fixes an actively exploited Outlook vulnerability. Check for Office updates separately.

For more information, read the full story at the original source: Malwarebytes Labs ↗

Vulnerabilities in this story

• CVE-2026-116928 Microsoft Windows 10, Microsoft Windows 11, Microsoft Windows Server 9.8Critical
• CVE-2026-124194 KEV · fix by 2026-11-24 Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 6.5Medium

Also reported by

• Security Affairs: Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws ↗
• The Register: November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far ↗
• Dark Reading: November Patch Tuesday: An Overflowing Cornucopia of CVEs ↗
• Krebs on Security: Microsoft Fixes Nearly 1,100 Security Vulnerabilities ↗
• SecurityWeek: Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft ↗
• Franky's Web (Exchange): New security updates for Exchange Server (November 2026) ↗
• BleepingComputer: Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day ↗