Microsoft Fixes Nearly 1,100 Security Vulnerabilities

What happened?

Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software. This month’s Patch Tuesday addresses 63 critical flaws — including a zero-day in Microsoft Outlook — and comes amid important security updates from other software makers, including Adobe, Apple, Google and Mozilla. Image: Shutterstock.com. Diorama by @zepp1969.

Key details

• Microsoft released updates fixing nearly 1,100 security vulnerabilities across Windows and supported software.
• The November Patch Tuesday addresses 63 critical flaws, including a zero-day vulnerability in Microsoft Outlook.
• Over half of the critical bugs are remote code execution vulnerabilities, and 535 flaws allow privilege escalation.
• Microsoft has shipped more than 5,100 security patches this year, crediting AI advances for the increased volume.
• Only one flaw, CVE-2026-124194 in Outlook, is confirmed under active exploitation, affecting Microsoft 365 Apps for Enterprise and Office editions.
• Apple released out-of-cycle updates fixing at least nine vulnerabilities across iOS, iPadOS, macOS, watchOS, and visionOS, including iMessage flaws.
• Google Chrome 157.0.8103.50 patches nine security holes including the sixth Chrome zero-day this year, CVE-2026-125350, also fixed in Chromium-based browsers.

Summarised by SecOraLens from Krebs on Security. Always read the original source before acting. How SecOraLens verifies advisories.