Microsoft's November 2026 patch release addresses 1,259 vulnerabilities across Windows, Office, Developer Tools, and SharePoint, pushing total fixes past 5,100 for the year.
This technical overview highlights an actively exploited Outlook flaw involving UI failures and NTLMv2 hash exposure.
Among the issues fixed is a bug in the popular email program Outlook, which is already being used in real attacks. The problem allows unknown people to send a specially crafted email file and convince the victim to open it, without the program displaying the standard security warning.
When the user opens the file, the program connects to a network location controlled by the attackers, revealing identifying information that can be used to impersonate the user. According to security experts, stealing this information could give the attackers access to data and other services.
The company clarified that for such an attack to succeed, an internet connection and the user's participation are required, who must open the file. The issue was discovered and reported by a researcher named Nono and Benoît Sevens of Anthropic using Claude.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
CISA warns of security vulnerabilities in Cisco and Openwave systems
↗
The US cybersecurity agency CISA added the specific problem to the list of known problems exploited in attacks, ordering federal agencies to implement the fix by November 24, 2026. Microsoft has not yet attributed the attacks to any specific group nor has it released technical details on how the exploit is carried out.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)