Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 6.5.

Jak se o tom psalo 10

1. 11. 11. 2026 09:20 · CERT-SE SE

   Patchtisdag november 2026

   Flera leverantörer har släppt sina månatliga säkerhetsuppdateringar för november.

2. 11. 11. 2026 · zachyceno 04:00 · NCSC-FI FI nadpis události

   Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day

   Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: None, CVEs: CVE-2026-118747, CVE-2026-118746, CVE-2026-120796, CVE-2026-114155, CVE-2026-105544, CVE-2026-109475, CVE-2026-105568, CVE-2026-118146, CVE-2026-118735, CVE-2026-118148, CVE-2026-119889, CVE-2026-84004, CVE-2026-84005, CVE-2026-109476, CVE-2026-109478, CVE-2026-118741, CVE-2026-118750, CVE-2026-118749, CVE-2026-118748, CVE-2026-109481 (+1322 other associated CVEs), Summary: Today is Microsoft's…

3. 11. 11. 2026 03:21 · JPCERT/CC JP

   Security Alert: Microsoft Releases November 2026 Security Updates

4. 11. 11. 2026 02:41 · Cisco Talos US

   Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

   Microsoft has released its monthly security update for November 2026, which includes 1095 vulnerabilities affecting a range of products, including 64 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-124194 affects Microsoft Office Outlook. CVE-2026-124194 is a spoofing vulnerability involving Product UI does not Warn User of Unsafe Actions and has a CVSS base score of 6.5. Out of 64 "critical"…

5. 10. 11. 2026 21:39 · Qualys US

   Microsoft Patch Tuesday, November 2026 Security Update Review

   As the year approaches its final stretch, Microsoft’s November 2026 Patch Tuesday highlights the continued importance of proactive vulnerability management. This month’s security updates address vulnerabilities across the Microsoft ecosystem, reinforcing the need for organizations to promptly identify, prioritize, and remediate security risks. This month’s release includes fixes for several vulnerabilities that could potentially enable remote code execution, privilege escalation, or denial-of…

6. 10. 11. 2026 20:07 · BleepingComputer US

   Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day

   Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability. [...]

7. 10. 11. 2026 20:01 · Tenable Research US

   Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

   63Critical 1029Important 1Moderate 0Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as important, and one rated as moderate. This month’s update includes patches for 287 products and components. The following table lists the products with the most CVEs patched this month. A full list of patched products is available in the appendix. Rank Product CVE Count 1…

8. 10. 11. 2026 · zachyceno 19:33 · Microsoft Security US

   CVE-2026-124194 Microsoft Outlook Spoofing Vulnerability

   Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

9. 10. 11. 2026 · zachyceno 11. 11. 2026 02:30 · CrowdStrike US

   November 2026 Patch Tuesday: 1,252 CVEs Include One Zero-Day and 68 Critical Vulnerabilities

10. 10. 11. 2026 · zachyceno 20:30 · CISA KEV US

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability (CVE-2026-124194)

    CISA added CVE-2026-124194 to the Known Exploited Vulnerabilities catalog. Affected product: Microsoft Office. Remediation due date: 2026-11-24.