Microsoft Addresses Critical Vulnerabilities, Including Actively Exploited Outlook Zero-Day, in November 2026 Patch Tuesday

Microsoft has released its November 2026 security patches, addressing multiple vulnerabilities across its products. Among the critical fixes is an actively exploited Outlook zero-day vulnerability (CVE-2026-124194) that allows attackers to steal NTLM authentication hashes through malicious message files. The Cyber Security Agency of Singapore also highlighted these critical updates.