Microsoft Patch Tuesday fixes Outlook flaw already under attack

What happened?

Microsoft’s November Patch Tuesday fixes more than 1,000 Microsoft vulnerabilities, including an Outlook flaw that attackers are already exploiting to steal authentication information. The release also fixes 48 critical remote code execution (RCE) vulnerabilities that could allow attackers to run code on affected machines, in some cases without user interaction. While Windows updates address many of this month’s vulnerabilities, readers should check for Office updates as well: the exploited Outlook flaw is patched through the affected Office products.

Key details

• Outlook flaw under active attack to steal authentication data.
• 1,000+ Microsoft vulnerabilities fixed in November Patch Tuesday.
• 48 critical RCE vulnerabilities addressed across products.

Summarised by SecOraLens from Malwarebytes Labs. Always read the original source before acting. How SecOraLens verifies advisories.