Microsoft Patch Tuesday for January 2026 — Snort rules and prominent vulnerabilities

Microsoft's January 2026 security update addresses 112 vulnerabilities across Windows and Office products, including eight critical issues (notably RCEs in LSASS, Word, Excel, and Office and EoP in Windows Graphic Component and VBS Enclave). One important vulnerability (CVE-2026-20805) has been observed exploited in the wild; Microsoft assessed most critical issues as "less likely" to be exploited and not publicly disclosed. Cisco Talos released Snort 2/3 rules and recommends applying vendor updates and rulepacks to detect exploitation attempts.