Windows 11 update warning (Image: MICROSOFT)
Anyone using a Windows 11-powered laptop or desktop PC would be wise to check their settings without delay. Microsoft has just confirmed its latest Patch Tuesday release, and it’s another massive update that fixes a whopping 1,094 issues with this popular operating system. If that wasn’t bad enough, 63 of the bugs have been given a ‘Critical’ rating, and one has been confirmed as a ‘zero-day’ bug.
Microsoft introduces Windows 11 in 2021
For those not aware, a zero-day basically means hackers are already exploiting the issue to attack users in the real world.
This worrying gremlin, named CVE-2026-124194, affects Microsoft’s popular Outlook software and is targeting usersmpt to impersonate the user
An unauthenticated attacker could send a specially crafted
“An unauthenticated attacker could send a specially crafted message file and convince a user to open it in an affected version of Microsoft Outlook,” warns Microsoft.
“Opening the file could cause Outlook to connect to an attacker-controlled network location without displaying the usual external-content warning, potentially disclosing authentication information that could be used to impersonate the user. Exploitation requires network connectivity and user interaction.”
This latest Patch Tuesday follows Microsoft’s record-breaking update last month, which fixed over 1,400 flaws in Windows.
With so many issues being fixed, these
With so many issues being fixed, these are now updates that should be ignored and those using Windows must check their settings, install any pending software and restart their PCs immediately.
To install the latest Microsoft updates, click Start, open Settings and select Windows Update. Click Check for updates, then choose Download and install. Restart your PC if prompted to complete the process.
- Anyone with a Gmail account urged to follow new 2 minute email rule
- Watch out BT, a major rival is launching the “UK’s fastest” Wi-Fi
“Microsoft’s November 2026 Patch Tuesday delivers another exceptionally large update cycle, with 1,093 patches, including 63 critical vulnerabilities and 1 actively exploited zero-day,” explained Jack Bicer, Director of Vulnerability Research at Action1.
While that is down from October’s record-breaking 1,409
“While that is down from October’s record-breaking 1,409 patches, it still marks the third consecutive month with patch volumes at levels that would have been extraordinary earlier this year.
“CVE-2026-124194, an actively exploited vulnerability, is a spoofing flaw in Microsoft Outlook that attackers are already using.
“Email is the easiest door into any company, and this flaw turns one opened file into a stolen identity. A captured hash can let an attacker sign in as the victim, read their data, and move to other systems they can reach. If the victim is an administrator or a finance user, the damage grows fast. Because the warning users are trained to watch for never appears, even careful staff can be caught.”
