Microsoft Patches More Than 1000 Security Flaws
The update addresses 1,093 vulnerabilities across Microsoft products, including an Outlook flaw attackers already exploit.
- By Chelsey Arries
- Nov 12, 2026
Security updates from Microsoft address more than 1,000 vulnerabilities for a second consecutive month, including 63 critical flaws and an Outlook weakness that attackers already exploit.
The release fixes 1,093 vulnerabilities across products including Windows, Office, Exchange Server, Active Directory and Azure, according to Redmondmag. The total follows an earlier release that addressed more than 1,400 flaws.
Microsoft also fixed critical flaws in Word, Excel, PowerPoint and Outlook that could allow attackers to run malicious code remotely.
The Outlook vulnerability, CVE-2026-124194, could expose Windows authentication information if an attacker persuades someone to open a malicious file. Although Microsoft assigns it a moderate severity rating, the company has confirmed exploitation, according to the report.
Five critical flaws carry severity scores of 9.8 out of 10. They affect Windows LDAP, Windows Search, Azure OpenAI, Azure Managed Grafana and Windows Xbox Live Networking Service.
Security specialists cited in the report recommend prioritizing systems exposed to the internet and vulnerabilities that attackers already exploit.
About the Author
Chelsey Arries is assistant editor of Security Today, Campus Security Today, Occupational Health & Safety and Environmental Protection Online.