Updated:10:00 PM CET Nov,10
(new)
(c) 1998-2026 Gameguru Mania
Privacy Policy statement
|
Microsoft Patches 1,094 Flaws, Including Actively Exploited Outlook Zero-Day - tech|
| (hx) 10:00 PM CET - Nov,10 2026 | Microsoft's November 2026 Patch Tuesday fixes 1,094 Microsoft vulnerabilities across Windows, Office, SQL Server, SharePoint, Exchange, and other products.
The release includes one actively exploited zero-day in Microsoft Outlook, tracked as CVE-2026-124194.
This moderate-severity spoofing flaw (CVSS 6.5) lets an attacker send a specially crafted message file. When a user opens it, Outlook can connect to an attacker-controlled network location without showing the usual external-content warning.
That connection can leak the user’s NTLMv2 authentication hash, which an attacker could then use to impersonate the victim. Exploitation requires user interaction and network connectivity; the Preview Pane is not an attack vector.
Microsoft says it is aware of active exploitation in the wild. The company also patched dozens of Critical issues, many of them remote code execution bugs, in the same update.
Administrators are advised to prioritize the Outlook fix and apply the full set of November patches as soon as possible.
** |
|
last 10 comments: All comments
|
|
Add your comment (free registration required)