CriticalAPT
November 2026 Patch Tuesday: 1,094 Flaws, One Exploited
SOCRadar·Source published ·1 min read
What happened?
Microsoft’s November 2026 Patch Tuesday, released on November 10, 2026, fixes 1,094 vulnerabilities across Windows, Office, SQL Server, Exchange Server, SharePoint, Azure services, and developer tools. The total falls below October’s Patch Tuesday (1,413 flaws) but still makes this the second-largest monthly release on record. The release includes one zero-day and over 60 critical-rated vulnerabilities. The zero-day is an exploited Microsoft Outlook spoofing flaw that leaks NTLMv2 hashes, and no other flaw was publicly disclosed before the fix.