#CVE-2026-124194

Outlook Zero-Day CVE-2026-124194 Leaks NTLM Hashes: Patch Advised

November Patch Tuesday fixes an exploited Outlook zero-day: a crafted message file silently connects to an attacker's server and leaks the user's NTLMv2 hash.