Microsoft fixes over 1,200 flaws, including an already exploited Outlook vulnerability

Microsoft's November Patch Tuesday fixed more than 1,200 vulnerabilities, although sources report slightly different totals depending on whether third-party CVEs are included. The most urgent flaw is CVE-2026-124194 in Outlook, which has already been exploited and can cause the client to connect to an attacker-controlled resource when the user opens a specially crafted message file. The connection may expose NTLMv2 authentication hashes, potentially allowing attackers to impersonate users or compromise corporate accounts. This is not a zero-click attack, but the need for user interaction does not significantly reduce the risk in environments targeted by spear phishing. The release also includes dozens of issues considered potentially capable of spreading automatically, making patching, restricting NTLM, and monitoring connections to external network paths top priorities.

Source: The Hacker News