Cve 2026 124194 - GoKawiil

Microsoft Patch Tuesday fixes 1,093 flaws including actively exploited Outlook bug

Microsoft's November security update addressed 1,093 vulnerabilities, 63 of them rated critical, marking its second consecutive month with a four-digit CVE count. Among them is CVE-2026-124194, a moderate-severity Outlook spoofing flaw that Microsoft has confirmed is already being exploited, which can expose a victim's NTLMv2 hash via a malicious Office file.

darkreading.com · 2026-11-10

Microsoft's November Patch Tuesday fixes 1,093 vulnerabilities, including an Outlook zero-day

Microsoft released updates addressing 1,093 security flaws across Windows and supported software, 63 of them rated critical. One flaw, CVE-2026-124194, a spoofing bug affecting Outlook and Microsoft 365 Apps, is already being actively exploited. The release brings Microsoft's total patches issued this year to over 5,100, alongside security updates this week from Apple, Adobe, Google and Mozilla.

krebsonsecurity.com · 2026-11-10