Microsoft has released a security advisory on the 10th of November 2026 in line with their regular monthly patch schedule which includes 1094 updates to address vulnerabilities in nine (9) medium risk products.
These updates address vulnerabilities which may impact services through Elevation of Privilege, Remote Code Execution, Information Disclosure, Denial of Service, Security Restriction Bypass, Data Manipulation, and Spoofing.
For more information please see: Security Update
This release consists of security updates for the following products, features and roles:
- Azure
- Defender
- Developer Tools
- Exchange Server
- Microsoft Office
- Other
- SQL Server
- SharePoint Server
- Microsoft Windows
Notable CVEs:
CVE-2026-124194 - Microsoft Outlook Spoofing Vulnerability - Exploitation Detected
An unauthenticated attacker could send a specially crafted message file and convince a user to open it in an affected version of Microsoft Outlook. Opening the file could cause Outlook to connect to an attacker-controlled network location without displaying the usual external-content warning, potentially disclosing authentication information that could be used to impersonate the user. Exploitation requires network connectivity and user interaction.
Matsco recommends any affected systems are updated as soon as convenient.
Please contact the Matsco Solutions team on the below if you would like any further information or would like to schedule a maintenance.