Microsoft patches 1,259 flaws, including an actively exploited Outlook vulnerability that could expose NTLMv2 hashes through crafted files.