January 2026 Patch Tuesday: Active Zero-Day & 111 Other Flaws Addressed

Microsoft's January 2026 Patch Tuesday fixes 112 vulnerabilities across Windows and related products, including three zero-day flaws (one actively exploited and added to CISA's KEV). The release addresses eight critical-severity issues—mostly remote code execution and elevation-of-privilege vulnerabilities affecting Office, LSASS, NTFS, and other core components—and calls for prompt patching while recommending SOCRadar tools for prioritization and external attack-surface visibility.