Microsoft Releases November 2026 Patch Tuesday Updates, Addresses Actively Exploited Outlook Spoofing Vulnerability

Microsoft has released its November 2026 Patch Tuesday updates, addressing 1,093 vulnerabilities, including 63 critical flaws. Notably, CVE-2026-124194, a Microsoft Outlook spoofing vulnerability, is confirmed by CISA as actively exploited in the wild. Other critical vulnerabilities include CVE-2026-116928 (Windows Search Remote Code Execution) and CVE-2026-119952 (Windows Schannel Remote Code Execution), both allowing unauthenticated attacks. Organizations are urged to apply patches immediately, especially for the actively exploited Outlook flaw.