Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days
ID: 39852fde-f8a5-5e52-a8ae-90f7e0e25ed2
STIX ID: report--39852fde-f8a5-5e52-a8ae-90f7e0e25ed2
Feed Name: securityonline.info
Microsoft's January Patch Tuesday fixes 114 vulnerabilities across Windows components, including eight critical issues and three zero-days; at least one (CVE-2026-20805 in Desktop Window Manager) is being actively exploited and has been added to CISA's KEV catalog. The bulletin also addresses critical RCEs affecting LSASS and Microsoft Office, and Microsoft warns of a Secure Boot bypass and the removal of vulnerable Agere modem drivers; administrators are urged to prioritize testing and deployment of these patches before vendor deadlines.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.