Microsoft Issues Record 1,235 Security Updates in November

Microsoft released a record-breaking 1,235 security updates during its November Patch Tuesday, marking the fourth time this year the company has set a new patching milestone. The updates address a vast array of flaws, including 66 critical vulnerabilities. Most of the patched issues involve elevation of privilege, remote code execution, and information disclosure.

Among the updates is a fix for CVE-2026-124194, a zero-day spoofing bug in classic Outlook that is being actively exploited in the wild. This vulnerability allows attackers to steal NTLM account hashes by bypassing external content warnings when a user opens a crafted message file. Other critical fixes include pre-authentication remote code execution vulnerabilities in the Windows Schannel component and Exchange servers via the Windows Search component.

Beyond security patches, the company ended support for several product versions on November 11, 2026, including PowerShell 7.4 LTS, the .NET 8 Long Term Servicing channel, and various editions of Windows 11. In a parallel industry move, SAP issued its largest-ever security update cycle, addressing 43 vulnerabilities, including the ProxyGate broken access control flaw in SAP Gateway.