Microsoft Issues Urgent January 2026 Patch Tuesday Fixing 114 Flaws, Including Actively Exploited Zero-Day

Microsoft released its January 2026 Patch Tuesday updates, addressing a total of 114 vulnerabilities, including three zero-day flaws that require immediate patching.

• One zero-day flaw, CVE-2026-20805, affecting the Desktop Window Manager, is actively exploited in the wild and could lead to sensitive information disclosure.
• The patch bundle also addresses eight critical severity flaws, including Remote Code Execution (RCE) bugs in core components like Windows LSASS and Microsoft Office.