# Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

> **Open Intelligence Dossier** · First detected: 2026-11-11 13:20 UTC · Category: Technology

## Executive Summary
Microsoft's November Patch Tuesday addresses 1,259 flaws, including an actively exploited Outlook zero-day that may expose NTLMv2 hashes.

## Intelligence Brief
Microsoft released its November Patch Tuesday update on November 11, 2026, addressing 1,259 security flaws across its products, according to coverage from The Register. Among the vulnerabilities is CVE-2026-124194, an Outlook zero-day that SOC Prime reports exposes NTLM hashes and that Forbes confirms is under active exploitation. Coverage from SaskToday.ca notes that a global Microsoft Outlook outage was reported on the same day that the U.S. cybersecurity agency confirmed active exploitation of the security flaw. The Register states that one of the bugs in the November batch was already under attack at the time of patching, while Forbes reports Microsoft's confirmation of active exploitation of the new Outlook zero-day. SOC Prime's coverage identifies the specific CVE and its connection to NTLM hash exposure. The Register's reporting frames the November Patch Tuesday as notable for its volume, describing over 1,000 bugs with one already under attack. Forbes focuses on Microsoft's confirmation that the Outlook zero-day is being actively exploited in the wild. SaskToday.ca connects the security disclosure to a reported global Outlook outage and the U.S. cybersecurity agency's confirmation of active exploitation. The coverage does not yet specify which products beyond Outlook are affected by the other 1,258 flaws, nor does it detail the scale of the outage or which organizations were targeted by the active exploitation. Readers should understand that Patch Tuesday is Microsoft's regular monthly security update cycle, and that NTLMv2 hash exposure can enable credential relay attacks against enterprise environments. The active exploitation of an Outlook zero-day raises stakes for organizations relying on Microsoft 365 and on-premises Exchange deployments. Coverage does not state whether the global outage was directly caused by the vulnerability or by the patching response. What to watch next depends on forthcoming advisories from Microsoft and the U.S. cybersecurity agency, which coverage indicates has confirmed the active exploitation but has not yet released detailed mitigation guidance beyond the patch itself. Organizations will need to assess whether their Outlook installations are patched and whether any NTLMv2 hash exposure occurred before the update was applied.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| SOC Prime | CVE-2026-124194: Outlook Zero-Day Exposes NTLM Hashes | [Source Link](https://news.google.com/rss/articles/CBMiogFBVV95cUxNaFhmWUtvSzVsb1Z6eWdpYlpJNkh0Y25LbVJqOUVZVEl3Q0FIbnBQYzJLODBOeVZUMFFsal9VQzZqdnZ4dG5oNjZjSmx1Mm1tZUw4VDdpN29xa0t0dXA5QnBnM2tGUGl3Y2EtVW8yQzJESUh6N2E0Qlc3a3ZRdGloV19PUnFnVVB0eFMyOUVGSEZGeEhOY2FrQlhTM3UzZDV3SHc?oc=5) |
| SaskToday.ca | Global Microsoft Outlook outage reported as U.S. cybersecurity agency confirms active exploitation of security flaw | [Source Link](https://news.google.com/rss/articles/CBMi9gFBVV95cUxPZVNXbTVMRGhzNDYzN0Q5RzhPN0U1cV9heXdSbXBDWTJaUnl3Ny1Wb0xpNkZOVnBHbi1rMzQ3UExDWFE3d085djBIWkZLUXAxM0hPUGpxcHFlUkpnSUtYTFZ1c2pMZVVfZlFUUVJlcTVJNnpPMEdEZDdubTNGVE9Nd2ctSWpxR0c5dTgtdkV4akJTREoxaFV2R0dXVUFtc1Y3UVM5WHUzNFRTRFk5cXZOS3BTVVFXY0NQckhWX1FwQXhuNnViQ1d3bm5GZUQyd00yZnV5SGRlQ25GUEpqb3AtalNBcDF1QTV4dHVVcGlsRXhCVmlIZ2c?oc=5) |
| The Register | November Patch Tuesday boasts over 1,000 bugs, one already under attack | [Source Link](https://news.google.com/rss/articles/CBMiwwFBVV95cUxQb0xDZGF1WmpBdXlabWtCem1kTnFOUEZRRGtKLUJxR0xxUnRTX243MFJzM2tha0FjdkVBWHM1Q0N0LTZtY21uV3ktdFBNYWhIT1BITVVnYkI5UGxPMmtHZzN6UHNDYU85aDIzTVZGdlNxNzBweVFIbk9hai1zcjNhYzJFanNfUFM0cC1VcjJYdUdydHV4OUg1V2pGYWR3SzN6d2UyMDlGenE1VmdoMTVwZjJkS3FXVUJKc2VEQTNRQkFsdXc?oc=5) |
| Forbes | Microsoft Confirms Active Exploitation Of New Outlook Zero-Day | [Source Link](https://news.google.com/rss/articles/CBMitgFBVV95cUxNWnFVWVNBeU5JWnJqeUlMNXgwZFZjNTlFOTZ1Rnh0TjhjTGJLTFhxTl9ncnZTNUozUnF2bENxLXdBdm82UkpJYUNZMW1HQUtYTE8tSURmYmgwNUN0dENJa21hWjJHbGU1NWdmT3NKc2xZdWs1Q1kzeVVqMDVTNkJHNnpaa0hwZVZjaEt3eVl6YmxmTmJnLWI0NEQ1ZWdOZUdzeTRmekMzZlRBeWV3R0QtRmxYLTc5UQ?oc=5) |

---
*Canonical Source: https://pulse.byoaiapps.com/trend/2026-11-11/microsoft-patches-1-259-flaws-including-exploited-outlook-bug-that-may-expose*