Skip to content
ThreatCluster

Microsoft November 2026 Patch Tuesday Addresses 1093 Vulnerabilities

First seen 12 Nov 2026, 20:14 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 20:15 UTC
  • •Microsoft patched 1093 vulnerabilities, including 63 critical ones.
  • •CVE-2026-124194 is a spoofing vulnerability in Outlook, actively exploited.
  • •Organizations should prioritize patching Internet-facing systems immediately.

On November 12, 2026, Microsoft released its Patch Tuesday updates, addressing 1093 vulnerabilities across various products, including 63 rated as critical. Among these vulnerabilities, CVE-2026-124194, a spoofing vulnerability in Microsoft Outlook, is actively exploited and has been added to CISA's Known Exploited Vulnerabilities catalog. The updates also include a critical remote code execution vulnerability in Windows Schannel (CVE-2026-119952) with a CVSS score of 8.1, which is assessed as more likely to be exploited. Organizations are advised to prioritize patching Internet-facing and business-critical systems immediately due to the high risk of exploitation. The release includes a total of 535 Elevation of Privilege vulnerabilities, 296 Remote Code Execution vulnerabilities, and 156 Information Disclosure vulnerabilities. The urgency of the patching is underscored by the presence of a zero-day vulnerability that has been actively exploited prior to the patch release.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 4h ago How this analysis works

Timeline

2026-11-10
CVE-2026-124194 published
Microsoft disclosed a spoofing vulnerability in Outlook, confirmed to be actively exploited.
Ccb.Belgium.Be
2026-11-10
CVE-2026-119952 published
A critical remote code execution vulnerability in Windows Schannel was disclosed.
Ccb.Belgium.Be

More articles in this cluster (2)

Following this threat?

Track CVE-2026-112967 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (33)

1 / 3

Common questions

Which Microsoft products are affected?
Multiple Microsoft products are affected, including Microsoft Office Outlook and Windows Schannel.
What is the urgency of patching?
Patching is urgent due to the presence of actively exploited vulnerabilities, including CVE-2026-124194.
How can organizations prioritize their patching?
Organizations should focus on Internet-facing and business-critical systems first to mitigate risks.