SecOraLens
CriticalZero-Day

Microsoft November 2026 Patch Tuesday Fixes 1,093 Vulnerabilities, Including Outlook Zero-Day

Cyber Security News·Source published ·1 min read

What happened?

Microsoft has released its November 2026 Patch Tuesday updates, fixing 1,093 newly released vulnerabilities across Windows, Office, SQL Server, SharePoint, Exchange Server, Azure services, and developer tools. The release includes one actively exploited zero-day in Microsoft Outlook that can leak a user’s NTLMv2 authentication hash to an attacker. This update addresses 63 critical vulnerabilities, 1,029 important issues, and one moderate flaw among the newly released entries.

Key details

  • Microsoft released November 2026 Patch Tuesday updates fixing 1,093 newly released vulnerabilities across Windows, Office, SQL Server, SharePoint, Exchange Server, Azure services, and developer tools.
  • The release includes 63 critical vulnerabilities, 1,029 important issues, and one moderate flaw among the newly released entries.
  • The Outlook zero-day requires the user to open the malicious file and have network connectivity; the Preview Pane is not an attack vector.
  • Affected Outlook products include 32-bit and 64-bit editions of Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise.
  • Critical server fixes include vulnerabilities in SMB Server transport driver, TCP/IP, Exchange Server, LDAP, Schannel, CredSSP, IIS, Print Spooler, Active Directory Domain Services, and Remote Procedure Call Runtime.
  • Cloud products received critical fixes: Azure OpenAI and Azure Managed Grafana each got a privilege escalation fix, and Microsoft Defender received a critical code execution fix.

Affected

  • 32-bit and 64-bit editions of Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise are affected by the exploited Outlook flaw.
  • Windows, Office, SQL Server, SharePoint, Exchange Server, Azure services, and developer tools are covered by the 1,093 vulnerability fixes.

Fixes and mitigations

  1. Administrators should prioritize applicable security updates for the exploited Outlook vulnerability because exploitation is already underway.
  2. Microsoft provides a comprehensive Security Update Guide outlining all identified vulnerabilities with detailed references and resources for further exploration.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.

Back to all advisories