Microsoft Releases November 2026 Patch Tuesday Updates, Addressing Critical Vulnerabilities Including Actively Exploited Outlook Flaw

Microsoft has released its November 2026 Patch Tuesday updates, fixing numerous vulnerabilities across its software and products. Among the critical patches are fixes for five high-severity flaws (CVSS 9.8) in Windows Kerberos, LDAP, DNS, DHCP Server, and iSCSI, which could allow unauthenticated attackers to execute code or gain privileges over a network. Additionally, an actively exploited Outlook vulnerability (CVE-2026-124194) with a CVSS score of 6.5, which could expose authentication information, has also been addressed. Users are urged to apply these security updates promptly.