Skip to content
OriginalSign in
Image: SANS ISC

SANS ISC

Microsoft November 2027 update fixes 1,260 vulnerabilities

Part of the CVE-2026-124194 story · since 10 Nov

Developinglatest 36 minutes ago8 articles7 outlets
10 Nov · SecurityWeek firstNowThis article3rd of 8
  • Tue 10 Nov, 19:30 UTC. SecurityWeek, first report. Microsoft patches Outlook zero day exploited in the wild. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 20:31 UTC. CISA, its first report on the story. CISA Adds Actively Exploited Outlook Spoofing Flaw to KEV. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 21:00 UTC. SANS ISC, its first report on the story. Microsoft November 2027 update fixes 1,260 vulnerabilities. Cites a CVE in CISA KEV. This article, 3rd of 8.
  • Tue 10 Nov, 21:00 UTC. thezdi.com, its first report on the story. Adobe and Microsoft November updates fix over 1,200 flaws. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 22:30 UTC. Krebs on Security, its first report on the story. Microsoft fixes 1,093 flaws, including an exploited Outlook bug. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 23:01 UTC. SecurityOnline, its first report on the story. Microsoft fixes 1,093 flaws, including exploited Outlook zero-day. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 23:30 UTC. SecurityOnline. Microsoft patches exploited Outlook spoofing zero day. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 23:31 UTC. Dark Reading, its first report on the story. Microsoft fixes 1,093 flaws as Outlook zero day remains active. Cites a CVE in CISA KEV.

Microsoft has released its Patch Tuesday for November 2027, with a significant patch surge across Windows, Office, and related services. SANS ISC notes that the update cycle addresses 1,260 distinct vulnerabilities, of which 68 are rated critical. A substantial portion targets Chromium components that affect Microsoft Edge, with 167 Chromium issues listed in the advisory. The patch bundle spans multiple product families and versions, reflecting a broad effort to mitigate a wide range of security flaws disclosed this month.

Among the list, several notable vulnerabilities are highlighted. CVE-2026-124194 is described as a spoofing vulnerability in Outlook that is already being exploited in the wild.

Other important entries include CVE-2026-119958, a critical remote code execution vulnerability in Microsoft LDAP; CVE-2026-109459, CVE-2026-119967, CVE-2026-116710, CVE-2026-119963 and CVE-2026-119964, a group of critical flaws in Microsoft Queuing and Queue Manager; and CVE-2026-113859, a Windows TCP/IP remote code execution issue (CVSS base score 7.5).

The list also features elevation of privilege, information disclosure, and security feature bypass vulnerabilities across .NET, ASP.NET Core, Active Directory, Azure, Office, and other components, with a variety of CVSS scores noted. The article attributes these findings to Microsoft’s published advisories, and attributes exploitation status where stated. The report emphasises the scale of the November 2027 release and the urgency implied by the exploitation of CVE-2026-124194.

How the story developed

All 8 articles
Developinglatest 36 minutes ago8 articles7 outlets

8 articles from 7 outlets since 10 Nov. Still developing; the latest report was 36 minutes ago. This was the 3rd report, 2 hours after the first.

Now10 NovFirst reportSecurityWeek · 10 Nov, 19:30This article3rd of 8 · day 0
  • Tue 10 Nov, 19:30 UTC. SecurityWeek, first report. Microsoft patches Outlook zero day exploited in the wild. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 20:31 UTC. CISA, its first report on the story. CISA Adds Actively Exploited Outlook Spoofing Flaw to KEV. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 21:00 UTC. SANS ISC, its first report on the story. Microsoft November 2027 update fixes 1,260 vulnerabilities. Cites a CVE in CISA KEV. This article, 3rd of 8.
  • Tue 10 Nov, 21:00 UTC. thezdi.com, its first report on the story. Adobe and Microsoft November updates fix over 1,200 flaws. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 22:30 UTC. Krebs on Security, its first report on the story. Microsoft fixes 1,093 flaws, including an exploited Outlook bug. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 23:01 UTC. SecurityOnline, its first report on the story. Microsoft fixes 1,093 flaws, including exploited Outlook zero-day. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 23:30 UTC. SecurityOnline. Microsoft patches exploited Outlook spoofing zero day. Cites a CVE in CISA KEV.
  • Tue 10 Nov, 23:31 UTC. Dark Reading, its first report on the story. Microsoft fixes 1,093 flaws as Outlook zero day remains active. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
Show all 8 articles as a list
  1. Tue 10 NovDay 08
    1. Microsoft patches Outlook zero day exploited in the wild19:30 · SecurityWeek · First report · Known exploited CVE
    2. CISA Adds Actively Exploited Outlook Spoofing Flaw to KEV20:31 · CISA · official · CISA alert · Known exploited CVE
    3. Microsoft November 2027 update fixes 1,260 vulnerabilities21:00 · SANS ISC · Known exploited CVE · This article, 3rd of 8
    Show 5 more from 10 Nov
    1. Adobe and Microsoft November updates fix over 1,200 flaws21:00 · thezdi.com · Known exploited CVE
    2. Microsoft fixes 1,093 flaws, including an exploited Outlook bug22:30 · Krebs on Security · Known exploited CVE
    3. Microsoft fixes 1,093 flaws, including exploited Outlook zero-day23:01 · SecurityOnline · Known exploited CVE
    4. Microsoft patches exploited Outlook spoofing zero day23:30 · SecurityOnline · Known exploited CVE
    5. Microsoft fixes 1,093 flaws as Outlook zero day remains active23:31 · Dark Reading · Known exploited CVE

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in