Microsoft Patch Tuesday for January 2026 — Snort rules and prominent vulnerabilities
Summary: Microsoft's January 2026 security update covers 112 vulnerabilities, 8 of them rated critical, including six remote code execution flaws in Windows LSASS, Microsoft Word, Excel and Office. Microsoft reported that one important-rated flaw, CVE-2026-20805, an information disclosure bug in Desktop Window Manager with a CVSS score of 5.5, has already been exploited in the wild.
Why it matters: The one flaw Microsoft confirms was exploited in the wild is rated only important, not critical, so patch priority driven by severity ratings alone would have left CVE-2026-20805 unaddressed on your endpoints.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-20805CVE-2026-20822CVE-2026-20854CVE-2026-20876CVE-2026-20944CVE-2026-20952CVE-2026-20953CVE-2026-20955
- Related
- Patch Tuesday, January 2026 Edition Cyber Risks ·CVE-2026-20805: Microsoft Windows Information Disclosure Vulnerability Known Exploited Vulnerabilities · Jan 13, 2026