Microsoft
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
At a glance
Low rather than Medium: exposure is scored at a default because we cannot see your systems or suppliers. If you run or depend on Microsoft Outlook, treat it as Medium.
Briefing
There is no written leader briefing for this story yet. These questions come from the facts we hold.
Questions to ask IT
- Do we run Microsoft Outlook, and which versions?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 10 Dec?
Next steps
- Confirm whether this affects systems or suppliers in your estate
- A record-breaking 1,235 flaws are addressed in Microsoft's November 2026 Patch Tuesday updates.
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- Microsoft's November 2026 Patch Tuesday addresses 1,235 flaws, including an actively exploited Outlook zero-day vulnerability.
Read the original reportBleepingComputer(opens in a new tab)
Products and services involved
- Microsoft Outlook98% match confidence
Part of Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ov
- Server-side Request Forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network
- Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network
- Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally
- Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network
Pulse
Last change 2h ago · Next recheck 11 Nov 2026, 20:04 UK time
- Story10 Nov 2026, 20:04 UK time · 2h ago
Linked reporting from BleepingComputer (independent original reporting).
Read source (BleepingComputer)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- BleepingComputerNews
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
- ProbableSummary fact75% confidence
Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability.