Microsoft released its November Patch Tuesday, fixing 1,093 security vulnerabilities in Windows and related software, including 63 critical flaws such as a zero-day in Outlook (CVE-2026-124194). Nearly half of the critical bugs are remote code execution issues, and 535 flaws allow privilege escalation. This brings Microsoft’s total patches for 2026 to over 5,100, a sharp rise from the roughly 100 patches per month a year earlier, a change the company attributes to artificial-intelligence-assisted bug hunting. The Outlook spoofing bug is already being actively exploited. The update week also saw security releases from Adobe (110 fixes), Apple (nine iOS/iPadOS, macOS, watchOS, visionOS bugs), Google (Chrome 157.0.8103.50 fixing nine holes, including CVE-2026-125350) and Mozilla (Firefox 160 fixing almost 100 CVEs). 1
Published by Krebs on Security · On GETSECURE.ai ·
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
⚠️ Critical Alert
Why This Matters
If you use Windows or Microsoft 365 Apps for Enterprise, you should verify that the November updates are installed to protect against the active Outlook exploit and the many remote-code and privilege-escalation bugs.
Title card · GETSECURE.ai
References
- Krebs on Security. (2026, November 10). Microsoft Fixes Nearly 1,100 Security Vulnerabilities. Krebs on Security. https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities/
Original Source
Krebs on Security
Read original →