Microsoft and Adobe Patch Tuesday, January 2026 Security Update Review | Qualys
Summary: Microsoft's January 2026 Patch Tuesday resolves 115 vulnerabilities, including eight critical and 106 important-severity flaws, and addresses three zero-day vulnerabilities - one exploited and two publicly disclosed. Adobe released 11 security advisories covering 25 vulnerabilities across products including ColdFusion, Illustrator, InDesign, and the Substance 3D line, 17 of them rated critical.
Why it matters: One of the three zero-days is already under active exploitation, and CISA has set a patch deadline of February 3, 2026 - a date that arrives before many organizations finish their normal patch cycle.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026