Microsoft January 2026 Patch Tuesday fixes 114 flaws and actively exploited flaw

#cybersecurity #infosec

Summary

Microsoft's January 2026 Patch Tuesday fixes 114 vulnerabilities, including an actively exploited zero-day in the Desktop Window Manager and eight critical flaws. The update also addresses expiring Secure Boot certificates and removes vulnerable legacy modem drivers used in previous attacks.

Take Action:

Another important and urgent advisory: One zero-day vulnerability is actively exploited in the wild, two more reported and eight critical flaws in Office and WIndows. Patch your Windows Operating Systems ASAP, then Microsoft Office. Then review the advisory for the rest of the Microsoft products and Windows components you use.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines