Microsoft patches 1,093 vulnerabilities, including exploited Outlook flaw

Microsoft released updates fixing 1,093 vulnerabilities in Windows and supported software, including an Outlook spoofing flaw already being exploited, Krebs on Security reported. The release addresses 63 critical vulnerabilities and 535 flaws that allow attackers to elevate privileges on vulnerable devices. Microsoft identifies CVE-2026-124194 as the one flaw in this release known to be under active exploitation. It affects Microsoft 365 Apps for Enterprise and editions of Microsoft Office. Nearly half of the critical flaws permit remote code execution. Microsoft credits advances in artificial intelligence with helping it find and fix the increased volume of security bugs in recent months.