Microsoft Patches 1,094 Windows Flaws, Including 1 Exploited Outlook Bug
Updated
Updated · ZDNet · Nov 11
Microsoft Patches 1,094 Windows Flaws, Including 1 Exploited Outlook Bug
3 articles · Updated · ZDNet · Nov 11
Summary
1,094 vulnerabilities were fixed in Microsoft’s November Patch Tuesday release, including 63 rated critical and an Outlook spoofing flaw already exploited in the wild.
The Outlook bug can be triggered when a user opens a malicious email file, causing Outlook to connect silently to an attacker-controlled network and potentially leak an NTLMv2 hash that could be used to impersonate the victim.
KB5132061 also brings Windows 11 feature changes, led by a gradually rolling out customizable File Explorer right-click menu and a new Cloud rebuild recovery option that reinstalls Windows from online images if a PC will not boot.
The update fully supports Windows 11 25H2 and 26H2, while Home and Pro support for 24H2 ended last month, leaving only some Enterprise and Education editions on continued security updates.