Security AlertCritical
Microsoft patches 1,235 flaws, including exploited Outlook zero-day
Nov 10, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
Microsoft’s November Patch Tuesday fixes 1,235 flaws, including an actively exploited Outlook spoofing bug. Users should update affected Microsoft products now.
Key points
- Microsoft fixed 1,235 flaws across its products.
- Outlook zero-day CVE-2026-124194 was actively exploited.
- The bug can leak NTLMv2 hashes through a malicious file.
Why it matters
This affects businesses and households that use Microsoft Office or Windows. A successful attack could expose login hashes and help an attacker impersonate a user.
Who’s affected: Microsoft Outlook and other Microsoft products
What to do
- Install Microsoft’s latest security updates.
- Be cautious with unexpected Outlook files.
- Limit user interaction with untrusted attachments.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.