Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation. 

Source: SecurityWeek · 2026-11-10