Microsoft's November Patch Tuesday fixes 1,093 vulnerabilities, including an Outlook zero-day
Microsoft released updates addressing 1,093 security flaws across Windows and supported software, 63 of them rated critical. One flaw, CVE-2026-124194, a spoofing bug affecting Outlook and Microsoft 365 Apps, is already being actively exploited. The release brings Microsoft's total patches issued this year to over 5,100, alongside security updates this week from Apple, Adobe, Google and Mozilla.