Today is Microsoft Patch Tuesday for November 2026. There are 1095 vulnerabilities that have been addressed this time around. One of them is an actively exploited zero-day in Outlook, and 64 are rated critical. We recommend applying these updates as soon as possible.

Notable Patch Tuesday Vulnerabilities for November

CVE-2026-124194

A spoofing vulnerability in Microsoft Outlook allows an attacker to steal the user’s NTLMv2 hash, which can be used to authenticate as that user. The attacker needs to trick a user into opening a specially crafted message file, and the Preview Pane is not an attack vector. This is a zero-day that is actively exploited.

CVE-2026-116928

An out-of-bounds write in the Windows Search component used by Microsoft Exchange Server allows an unauthenticated attacker to execute code by sending an email with a specially crafted attachment. Exchange processes the attachment automatically for indexing, so the recipient does not need to open the email. The fix ships in the Windows cumulative update for the server running Exchange, not in an Exchange update.

CVE-2026-118207

An improper input validation flaw in Microsoft Exchange Server allows an authenticated attacker with low-level access to execute code on the server by sending a specially crafted request. Microsoft considers exploitation more likely, so on-premises Exchange servers should be patched early.

CVE-2026-118146

An authorization flaw in Active Directory Domain Services allows an authenticated attacker with low-level access to execute code on the server by sending a specially crafted request. Microsoft considers exploitation more likely, so domain controllers should be prioritized.

CVE-2026-119958

An out-of-bounds write in Windows LDAP allows an unauthenticated attacker to execute code in the context of the LDAP service by sending a specially crafted set of LDAP calls. No user interaction is required.

Check the release notes for more information: https://msrc.microsoft.com/update-guide/releaseNote/2026-No

Need help addressing the above in your own organization? Speak to an Outpost24 expert.