CRITICAL/ NOVEMBER 12, 2026TODAY’S BRIEFING — #237
Critical Zoom RCE, Microsoft Patch Tuesday 1,093 fixes, Chromium use-after-free exploited
Zoom patches critical privilege escalation (CVSS 9.6); Microsoft ships 1,093 fixes including exploited Outlook spoofing bug; Google Chromium use-after-free under active exploitation across Chrome, Edge, Opera.
CVE-2026-108186Zoom Workplace for Windows — Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.CVE-2026-125350Google Chromium — Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. · In CISA KEVCVE-2026-124194Microsoft Office — Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. · In CISA KEVCVE-2026-108187Zoom Workplace for Windows — Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Read the full briefing →