On November 10, Microsoft patched 1,093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1,029 rated as important, and one rated as moderate.

This update includes a patch for one zero-day, CVE-2026-124194, a spoofing flaw in Microsoft Outlook that was exploited in the wild.

This month's update includes patches for 287 products and components. The products with the most CVEs patched this month are:

• Microsoft Office Word (65)
• Microsoft Office Excel (64)
• SQL Server (53)
• Windows Advanced Rasterization Platform (37)
• Windows Installer (36)
• Windows Graphics Kernel (35)
• Windows Kernel (28)
• Microsoft Office SharePoint (27)
• Windows DNS (22)
• Microsoft Office Outlook (20)
• Windows Print Spooler Components (20)

For more information, including the full list of patched products, please visit our blog.