Patch Tuesday, January 2026 Edition

Microsoft today issued patches to plug at least 113 security holes in its various Windows operating systems and supported software. Eight of the vulnerabilities earned Microsoft’s most-dire “critical” rating, and the company warns that attackers are already exploiting one of the bugs fixed today.
Adam Barnett,
Chris Goettl,
CVE-2023-31096,
CVE-2026-0628,
CVE-2026-0891,
CVE-2026-0892,
CVE-2026-20805,
CVE-2026-20952,
CVE-2026-20953,
CVE-2026-21265,
Desktop Window Manager,
Immersive,
Ivanti,
Kev Breen,
Latest Warnings,
Microsoft Office,
Microsoft Patch Tuesday January 2026,
Rapid7,
The Coming Storm,
Time to Patch