Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.

Summary from The Hacker News.

Explained

The technology and terms in this story. Learn more

More in Vulnerabilities

N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public

Infosecurity Magazinejust nowVulnerabilities

English Security Update Release Summary November 2026

VideoMicrosoft Security1h agoVulnerabilitiesCVE-2026-116945CVE-2026-118207+2

Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says

Infosecurity Magazine1h agoVulnerabilities

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

The Hacker News1h agoVulnerabilitiesEndpointCVE-2026-108186

Critical Xen Orchestra Flaws Exploited in Attacks

SecurityWeek2h agoVulnerabilities