News

Microsoft Patch Tuesday fixes Outlook flaw already under attack

Microsoft’s November 2026 Patch Tuesday fixes an actively exploited Outlook vulnerability. Check for Office updates separately.

Read at Malwarebytes Labs

Vendor

Microsoft

Exploitation

observed in the wild

Fix

available

• Malwarebytes Labs (malwarebytes.com)
• CVE-2026-116928 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-124194 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 47
   Talos research Talos 12h ago

   Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

   Fix available CVE-2026-124194CVE-2026-113862CVE-2026-118146+57 more Microsoft Cisco
2. 34
   News The Register 16h ago

   November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far

   Fix available CVE-2026-124194CVE-2026-116928CVE-2026-119958+1 more Microsoft
3. 64
   Research Rapid7 16h ago

   Patch Tuesday - November 2026

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-119952CVE-2026-116928 Microsoft
4. 64
   Research Rapid7 16h ago

   Patch Tuesday - November 2026

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-119952CVE-2026-116928 Microsoft
5. 52
   KrebsOnSecurity Krebs 16h ago

   Microsoft Fixes Nearly 1,100 Security Vulnerabilities

   Fix available CVE-2026-124194CVE-2026-125350 Microsoft Google
6. 45
   News CyberScoop 16h ago

   Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday

   Fix available CVE-2026-124194CVE-2026-116928 Microsoft
7. 94
   Ivanti advisory Ivanti 16h ago

   November 2026 Patch Tuesday

   Exploited CVSS 6.5 EPSS 0.83 Fix available CVE-2026-109618CVE-2026-109619CVE-2026-111497+10 more Ivanti PHP
8. 34
   Qualys TRU Qualys 18h ago

   Microsoft and Adobe Patch Tuesday, November 2026 Security Update Review

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft Adobe
9. 54
   News SecurityWeek 19h ago

   Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

   Exploited CVE-2026-124194 Microsoft
10. 63
    CVE NVD 19h ago

    Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

    CVSS 9.8 CVE-2026-116928 Microsoft
11. 47
    ISC diary SANS ISC 19h ago

    Microsoft Patch Tuesday November 2027

    Fix available CVE-2026-124194CVE-2026-119958CVE-2026-109459+57 more Microsoft Google
12. 79
    Research ZDI 19h ago

    The November 2026 Security Update Review

    Exploited CVSS 10.0 Fix available CVE-2026-124194CVE-2026-116928CVE-2026-119958+57 more Microsoft Adobe
13. 62
    Tenable research Tenable 19h ago

    Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

    Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-118146CVE-2026-120002+17 more Microsoft
14. 53
    CISA alert CISA 26h ago

    CISA Adds Six Known Exploited Vulnerabilities to Catalog

    Exploited CVE-2026-20320CVE-2026-111560CVE-2026-111793+3 more Cisco Barracuda
15. 87
    KEV CISA KEV 38h ago

    Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability

    KEV · due 24 Nov 2026 CVSS 6.5 Fix available CVE-2026-124194 Microsoft