Microsoft's November 2026 Patch Tuesday, released on November 10, fixes more than 1,000 security flaws, including one Outlook vulnerability that attackers are already exploiting. Separately, Windows 11 version 26H2 includes memory changes that Microsoft says make PCs with 8GB of RAM up to 20% more responsive. You can get both through Settings > Windows Update, but the Outlook flaw is fixed through Office updates, so update those too.
Two separate stories are easy to mix up here. One is the monthly security update (Patch Tuesday). The other is the 8GB memory work that shipped in Windows 11 26H2 and was announced on November 3. This guide separates them, explains what actually matters, and shows how to install and verify the updates safely.
Why You Will See Different Numbers
You may see "1,094", "1,235", or "more than 1,000" flaws in headlines. They all describe the same release. The difference is what each outlet counts. Microsoft's own list had about 1,093 to 1,094 CVEs, while BleepingComputer's analysis, which includes additional third-party issues, reported 1,235. Either way it is the second month in a row above 1,000, after October's record of more than 1,400.
What Is in the November 2026 Patch Tuesday
- About 1,093 to 1,094 Microsoft CVEs fixed, with 63 to 64 rated Critical depending on the tracker.
- One actively exploited zero-day: an Outlook spoofing flaw, CVE-2026-124194. No flaws in this release were publicly disclosed before the fix.
- Updates by version: KB5132061 for Windows 11 24H2, 25H2, and 26H2 (with a hotpatch version, KB5132043), KB5132059 for 26H1, and KB5131087 for 23H2.
- Stronger NTLM protection and tighter PowerShell script verification, which relate to the credential-leak risk in the Outlook flaw.
- Reliability fixes: USB Audio 1.0 devices that failed to start with a Code 10 error, a printer-installation error 87 on printers published in Active Directory, and Remote Desktop problems.
Early coverage reports no known issues listed for KB5132061 at release. As always, that can change after launch, so keep a backup of anything important.
The Outlook Zero-Day in Plain Language
The flaw, CVE-2026-124194, lets an attacker craft a file that makes Outlook quietly connect to a server the attacker controls. When that happens, the attacker can capture the victim's NTLMv2 hash, which is a digital fingerprint of their Windows credentials. It can be used to impersonate the person on other services or to try to crack the password later. Microsoft lists the flaw as exploited in the wild.
The 8GB RAM Improvements in Windows 11 26H2
On November 3, 2026, Microsoft said Windows 11 version 26H2 (build 26300.9818 or later) manages memory differently on PCs with 8GB of RAM. These are Microsoft's own figures, so treat them as best-case results rather than guarantees:
- Up to 20% more responsive everyday actions, such as Start, Search, right-click menus, Settings, the Snipping Tool, and File Explorer, compared with the January 2026 build. Microsoft based this on telemetry.
- Up to 40% faster multitasking in one lab scenario on a single 8GB laptop, so do not expect that on every PC.
- Up to 2GB more active data kept in memory through better compression and memory management, so Windows relies less on slower storage.
- Up to 900MB less memory growth across Windows, Edge, and Microsoft 365 apps in multitasking tests.
- Lighter background load: Widgets reportedly loads only when opened on PCs with 8GB or less.
Microsoft also says PCs with 16GB or 32GB of RAM remain more capable, so if you often run many apps, more RAM still helps. And these gains apply to 26H2. If you are on 24H2 or 25H2, you do not get the 26H2 memory changes just from the security update.
Check Which Version You Are Running
Press Win + R, type winver, and press Enter. The window shows your Windows 11 version and build number. To check whether the November update is installed, open PowerShell and run:
winver
Get-HotFix -Id KB5132061If PowerShell shows the KB entry, the update is installed. If it reports that it cannot find it, check Windows Update history, because your edition may use a different package, such as KB5132059 for 26H1.
How to Install the November 2026 Update
Windows installs updates automatically on default settings, but you can check manually:
- Back up important files or confirm your backup is recent.
- Open Settings > Windows Update.
- Optionally turn on Get the latest updates as soon as they are available if you want updates as soon as Microsoft releases them.
- Click Check for updates and wait for the download and installation.
- Restart when asked, then open Windows Update > Update history and confirm the November 2026 cumulative update is listed.
- Update Microsoft 365 or Office, Outlook, Edge, and Teams, because some fixes and memory improvements arrive through app updates.
Windows 11 23H2 is receiving its final updates, so if you are still on it, plan a move to 25H2 or 26H2.
Should You Install It Now or Wait?
For most people, install it soon. A month with an actively exploited flaw and 60-plus critical fixes is not one to postpone for long. If you rely on a work PC or specialized hardware, such as printers or USB audio devices, take a backup first and watch for problems in the first few days. Businesses should follow their normal patch testing, but prioritize systems that use Outlook.
Read Also: 9 Free Ways to Speed Up a Slow Windows 11 PC
Frequently Asked Questions
How many vulnerabilities did the November 2026 Windows update fix?
Microsoft's own list counted about 1,093 to 1,094 CVEs, and some analyses that include extra items report 1,235. Counts differ by what is included, but all agree it is over 1,000.
Is the Outlook flaw really being exploited?
Yes. Microsoft lists CVE-2026-124194 as exploited in the wild. It can leak Windows authentication information when someone opens a crafted file. It is fixed through Office updates.
Does the update make my 8GB PC faster?
The memory improvements are in Windows 11 version 26H2. Microsoft says 8GB PCs can be up to 20% more responsive, based on its own testing. Real results depend on your hardware and workload.
Do I still need more RAM?
If you run many apps or heavy browsing, yes, it can still help. Microsoft says 16GB or 32GB systems stay more capable even after these changes.
Is it safe to install the November 2026 update?
Early reports list no known issues for the main cumulative update. Back up your files first, install, restart, and check Update history. If you hit a problem, check Microsoft's release health page for your version.
Final Thoughts
This month brings a large security update with one actively exploited Outlook flaw, plus a real improvement for people stuck on 8GB of RAM. Install the update, update Office and Edge as well, and check that your Windows version is 26H2 if you want the memory changes. Treat Microsoft's performance numbers as best-case, and keep your files backed up.
Sources: Redmondmag on the November Patch Tuesday, SOCRadar on the exploited Outlook zero-day, and Windows Latest on the 8GB memory improvements.
