CVE-2026-124194

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 10, 2026

Last Seen

November 10, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Microsoft Patches Exploited Outlook Zero-Day CVE-2026-12419472.0

On November 10, 2026, Microsoft released a patch addressing 1,094 vulnerabilities, including a zero-day in Outlook tracked as CVE-2026-124194. This spoofing flaw allows attackers to exploit Outlook's failure to warn users before executing potentially dangerous actions. The vulnerability affects Micr...

Microsoft November 2026 Patch Tuesday Addresses 1,235 Vulnerabilities, Outlook Zero-Day Fixed72.0

On November 10, 2026, Microsoft released its Patch Tuesday updates, fixing a record 1,235 vulnerabilities, including one actively exploited zero-day in Microsoft Outlook. The zero-day, identified as CVE-2026-124194, is a spoofing vulnerability that can leak NTLMv2 authentication hashes to attackers....