Microsoft patches 1,093 flaws in November and an Outlook zero-day that steals NTLM hashes
On November 10, 2026, Microsoft’s Patch Tuesday delivered 1,093 fixes, including an already-exploited Outlook zero-day that leaks an NTLMv2 hash through a single crafted file. The month’s lesson: the exploited flaw is rated only Moderate (CVSS 6.5), proof that exploitation status outranks the score.