thehackernews.com/2026/11/microsoft-patches-1259-flaws-including.html Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes
Microsoft released fixes for 1,259 vulnerabilities, including an actively exploited Outlook flaw tracked as CVE-2026-124194 with a CVSS score of 6.5. Opening a crafted message can expose NTLMv2 hashes, and CISA added the bug to its KEV catalog with a November 24, 2026 federal deadline.
