# Microsoft patches 1,093 vulnerabilities, including exploited Outlook flaw

_Published Tuesday, November 10, 2026 at 9:33 PM EST · Security · Developing · Tier 1 — Major_

Microsoft released updates fixing 1,093 vulnerabilities in Windows and supported software, including an Outlook spoofing flaw already being exploited, Krebs on Security reported. The release addresses 63 critical vulnerabilities and 535 flaws that allow attackers to elevate privileges on vulnerable devices.

Microsoft identifies CVE-2026-124194 as the one flaw in this release known to be under active exploitation. It affects Microsoft 365 Apps for Enterprise and editions of Microsoft Office. Nearly half of the critical flaws permit remote code execution. Microsoft credits advances in artificial intelligence with helping it find and fix the increased volume of security bugs in recent months.

## Sources

- [Krebs on Security](https://krebsonsecurity.com/2026/11/microsoft-fixes-nearly-1100-security-vulnerabilities/)
- [SecurityWeek](https://www.securityweek.com/exploited-outlook-zero-day-among-1094-flaws-patched-by-microsoft/)

---
Canonical: https://techandbusiness.org/newswire/XqvsRXSQVNhPVTU6XkFvHU
Published: 2026-11-11T02:33:01.199Z
Story chronology: 2026-11-11T01:05:54.000Z
Retrieved: 2026-11-11T04:19:09.678Z
Publisher: Tech & Business (techandbusiness.org)