CVE-2026-109469

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 9, 2026

Last Seen

November 11, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Microsoft Patches Outlook Zero-Day Exploited in the Wild72.0

On November 10, 2026, Microsoft released security updates addressing 1,094 vulnerabilities, including CVE-2026-124194, a spoofing flaw in Outlook that is actively exploited. This vulnerability allows attackers to send a crafted message file that, when opened, connects Outlook to an attacker-controll...

Critical CVE-2026-109469 in Entra Device Registration: No User Action Required69.0

On November 5, 2026, Microsoft disclosed CVE-2026-109469, a critical vulnerability in Entra Device Registration, scoring 10.0 on the CVSS scale. This vulnerability allows unauthorized attackers to elevate privileges over a network through an authorization bypass. Microsoft has stated that the flaw w...