November Patch Tuesday: An Overflowing Cornucopia of CVEs
MentionsMicrosoftMicrosoft WindowsSharePoint
Microsoft serves up an actively exploited Outlook zero-day, and a wave of critical Exchange, SharePoint, Windows Search, and LDAP bugs that exhausted defenders need to prioritize fast.
Summary from Dark Reading.
Explained
The technology and terms in this story. Learn more
- ConceptPatch TuesdayMicrosoft's monthly security update day, the second Tuesday of every month.
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
