Microsoft fixes 1,235 flaws in November Patch Tuesday, including an Outlook zero-day
Microsoft released its November 2026 security updates, fixing 1,235 vulnerabilities, a record for a Patch Tuesday. Among them are 66 critical flaws, 48 of which allow remote code execution. The company also patched an Outlook zero-day (CVE-2026-124194) that was exploited in attacks to steal NTLM account hashes. The total excludes 108 flaws fixed earlier this month and follows the 1,411 from October, as Microsoft uses AI to find and patch vulnerabilities.
In 35 seconds
- Microsoft fixed 1,235 flaws in the November 2026 Patch Tuesday, a record for these updates.
- Of the total, 66 are critical and 48 of those allow remote code execution.
- An Outlook zero-day (CVE-2026-124194) exploited to steal account NTLM hashes was patched.
IASummary generated by artificial intelligence from a story by BleepingComputer. It may contain errors: the original source prevails.





Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.