Skip to main navigation Skip to main content Skip to page footer

Security Alert: Fortinet Security Updates - November 2026 | Security Alert: Microsoft Security Updates - November 2026

Data Protection Office
Contact us Report an incident
Data Protection Office
Contact us Report an incident

Security Alert: Microsoft Security Updates - November 2026

Microsoft has released its November 2026 security updates, addressing 1,235 vulnerabilities across multiple products, including 66 critical-severity vulnerabilities. The updates also address one actively exploited zero-day vulnerability, CVE-2026-124194, affecting Microsoft Outlook. These vulnerabilities may pose security risks to affected systems.

These updates apply to, but are not limited to: 

  • Windows OS: 11. 

  • Windows Server: 2022, 2025

  • Microsoft Office: 2024 

  • Microsoft 365 and Microsoft Edge 

  • Exchange Server Subscription Edition(SE)

Security Risks 

Successful exploitation of these vulnerabilities could allow attackers to execute malicious code, escalate privileges, gain unauthorized access, or disclose sensitive information. For the full list of security patches released by Microsoft, please refer to the  Microsoft Security Update Guide and apply the necessary updates.


Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and administrators:

  1. Apply the latest security patches as soon as possible to prevent unauthorized control over unpatched systems.

     

  2. Upgrade immediately to the latest supported version of installed Microsoft software to continue receiving technical support and security patches. 

The following Microsoft software products reached their end-of-life and need to be upgraded soon: 

  • Windows Server 2003, 2003 RE, 2008, 2008 RE, 2008 SP2, 2012, 2012 R2.

  • Exchange Server 2003, 2007, 2010, 2013, 2016, 2019, and Windows Vista, XP, 8, and 7, 10.

  • Microsoft SQL Server 2005, 2008, 2012, 2014, 2016 and MS Office 2013, 2016, and 2019.

  • Microsoft Office LTSC 2021. 

For more information, including other products reaching end-of-support in 2026, see Microsoft’s official documentation.

  1. Before any updating task, ensure you have a current, tested backup of your data. 


For further information and support, please contact the National Cyber Security Authority (NCSA) by emailing rwcsirt@ncsa.gov.rw or calling us on 9009.


References 

Released: November 2026 Exchange Server Security Updates