# SZB-a9c61ebfa0: Microsoft patches record 1,235 flaws, including exploited Outlook zero-day

BleepingComputer reports that Microsoft's November 2026 Patch Tuesday fixes 1,235 flaws, a record count. The item says one of them is an actively exploited Outlook zero-day.

- Type: Early warning
- Kind: Vulnerability
- Vendor: Microsoft
- Product: Outlook
- Status: Confirmed
- Sources: 15 distinct
- First seen: 2026-11-10 18:52 UTC
- Confirmed: 2026-11-10 19:32 UTC

Written by a model from the sources below. Verify against them.

## What to do

- Install the November 2026 Microsoft security updates on all Outlook and Windows systems
- Prioritize the Outlook zero-day fix and check Microsoft's advisory for interim mitigations
- Review Outlook logs for unusual activity until patched
- Apply Microsoft's security update for Outlook as soon as possible
- Block or restrict inbound messages from untrusted senders until patched
- Review Microsoft's advisory for CVE-2026-124194 for mitigation guidance

## Timeline

- 2026-11-10 18:50 UTC: Made public by Mastodon
- 2026-11-10 18:52 UTC: First seen by cve.now
- 2026-11-10 19:32 UTC: Confirmed as CVE-2026-124194

## Evidence (15 sources)

- 2026-11-10 · Social · [Mastodon](https://infosec.exchange/@patchsonar/117593644522143912): “Microsoft says attackers are exploiting a flaw in Outlook”
- 2026-11-10 · Press · [BleepingComputer](https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/): “Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability.”
- 2026-11-10 · Social · [Bluesky](https://bsky.app/profile/veduis.bsky.social/post/3mzy5c3tnen2t): “Microsoft November 2026 Patch Tuesday fixes a record 1,235 vulnerabilities, including one actively exploited Outlook zero-day.” (+11 more: [Bluesky](https://bsky.app/profile/cybernewsph.com/post/3mzy74vx2kx2y), [Bluesky](https://bsky.app/profile/hapsis.bsky.social/post/3mzy75coph22v), [Bluesky](https://bsky.app/profile/hapsis.bsky.social/post/3mzy7bf4e3k2z), [Bluesky](https://bsky.app/profile/entorisec.bsky.social/post/3mzyaiayyfg2w), [Bluesky](https://bsky.app/profile/1lpl.bsky.social/post/3mzydrqqtsk2j), [Bluesky](https://bsky.app/profile/newssecia.bsky.social/post/3mzyg2qzsgk2k), [Bluesky](https://bsky.app/profile/securityonline.bsky.social/post/3mzyhmmilfi25), [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mzyhybpwt224), [Bluesky](https://bsky.app/profile/veduis.bsky.social/post/3mzyjsbf63e2e), [Bluesky](https://bsky.app/profile/hendryadrian.bsky.social/post/3mzylk3wh2s2c), [Bluesky](https://bsky.app/profile/marcfredericgomez.bsky.social/post/3mzymdotenk2i))
- 2026-11-10 · Social · [Mastodon](https://mastodon.social/@EUVD_Bot/117593722776827234): “Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.” (+4 more: [Mastodon](https://mastodon.social/@EUVD_Bot/117593722814484431), [Mastodon](https://mastodon.social/@EUVD_Bot/117593726467420473), [Mastodon](https://mastodon.social/@EUVD_Bot/117593726497332442), [Mastodon](https://mastodon.social/@EUVD_Bot/117594402799398381))
- 2026-11-10 · Press · [SecurityWeek](https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/): “CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation.”
- 2026-11-10 · Social · [Mastodon](https://mastodon.social/@threadlinqs/117593807533595194): “Outlook zero-day in the wild: one crafted message file leaks NTLM hashes with no warning.” (+1 more: [Mastodon](https://mastodon.social/@threadlinqs/117594657826453217))
- 2026-11-10 · Social · [Bluesky](https://bsky.app/profile/hapsis.bsky.social/post/3mzy6ptgups2t): “Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft”
- 2026-11-10 · Social · [Bluesky](https://bsky.app/profile/ifynxstudio.bsky.social/post/2tpstdv6u5b5f): “Exploited Outlook zero-day CVE-2026-124194 (CVSS 6.5) leaks NTLMv2 hashes via a crafted message file.”
- 2026-11-10 · Social · [Mastodon](https://infosec.exchange/@infonewscyber/117594004384298563): “⚠️ FAILLE CRITIQUE CVE-2026-124194 activement exploitée : Microsoft Office Outlook – Action potentiellement dangereuse sans interaction de l'utilisateur”
- 2026-11-10 · Social · [Mastodon](https://mastodon.social/@Analyst207/117594013209857196): “Microsoft's latest update, KB5131096, is here to give your Windows 10 device a vital security boost, packing fixes for 1,235 vulnerabilities, including an actively exploited Outlook zero-day.”
- 2026-11-10 · Press · [The Record](https://therecord.media/patch-tuesday-microsoft-1000-bugs-again): “An exploited Outlook vulnerability drew most of the attention in Microsoft's latest Patch Tuesday, which listed 1,093 bugs total.”
- 2026-11-10 · Social · [Mastodon](https://mastodon.social/@ninjaintelgroup/117594213781881190): “Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network.”
- 2026-11-10 · Social · [Mastodon](https://infosec.exchange/@cyberseckyle/117594414163899017): “Microsoft's Nov 10 fixes include exploited Outlook CVE-2026-124194.” (+2 more: [Mastodon](https://infosec.exchange/@DailyCyberSecurity/117594446198273121), [Mastodon](https://infosec.exchange/@DailyCyberSecurity/117594579725557688))
- 2026-11-10 · Social · [Bluesky](https://bsky.app/profile/securityonline.bsky.social/post/3mzyjjgcebq2f): “Microsoft patches Outlook zero-day CVE-2026-124194, a spoofing flaw exploited in the wild and added to CISA KEV.”
- 2026-11-10 · Social · [Bluesky](https://bsky.app/profile/hendryadrian.bsky.social/post/3mzymuy347k2y): “including an actively exploited Outlook zero-day that can expose NTLM authentication hashes when a user opens a specially crafted message file.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-a9c61ebfa0&body=https%3A%2F%2Fcve.now%2FSZB-a9c61ebfa0%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-a9c61ebfa0

### Has Microsoft confirmed it?

Mastodon, BleepingComputer and Bluesky report a possible compromise. None of the sources says it happened.

Source: https://infosec.exchange/@patchsonar/117593644522143912, https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/, https://bsky.app/profile/veduis.bsky.social/post/3mzy5c3tnen2t, https://mastodon.social/@EUVD_Bot/117593722776827234, https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/, https://mastodon.social/@threadlinqs/117593807533595194, https://bsky.app/profile/hapsis.bsky.social/post/3mzy6ptgups2t, https://bsky.app/profile/ifynxstudio.bsky.social/post/2tpstdv6u5b5f, https://infosec.exchange/@infonewscyber/117594004384298563, https://mastodon.social/@Analyst207/117594013209857196, https://therecord.media/patch-tuesday-microsoft-1000-bugs-again, https://mastodon.social/@ninjaintelgroup/117594213781881190, https://infosec.exchange/@cyberseckyle/117594414163899017, https://bsky.app/profile/securityonline.bsky.social/post/3mzyjjgcebq2f, https://bsky.app/profile/hendryadrian.bsky.social/post/3mzymuy347k2y

### What should Microsoft users do?

Install the November 2026 Microsoft security updates on all Outlook and Windows systems. Prioritize the Outlook zero-day fix and check Microsoft's advisory for interim mitigations. Review Outlook logs for unusual activity until patched. Apply Microsoft's security update for Outlook as soon as possible. Block or restrict inbound messages from untrusted senders until patched. Review Microsoft's advisory for CVE-2026-124194 for mitigation guidance.

### Does it have a CVE?

Yes. It is tracked as CVE-2026-124194.

Source: https://cve.now/CVE-2026-124194

## Tracked as

- [CVE-2026-124194](https://cve.now/CVE-2026-124194.md)

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-a9c61ebfa0
Site guide for agents: https://cve.now/llms.txt