Microsoft Addresses Actively Exploited Outlook Vulnerability in November Patch Tuesday

Microsoft's November Patch Tuesday includes a fix for an actively exploited vulnerability in Outlook (CVE-2026-124194) that could allow attackers to steal authentication information. The flaw, with a CVSS score of 6.5, could be exploited if a user opens a specially crafted message file, potentially leading to spoofing over a network.