Microsoft’s January 2026 Patch Tuesday: 114 Flaws Fixed, Zero-Day Exploited
In January 2026, Microsoft released its first Patch Tuesday update of the year, addressing 114 security vulnerabilities affecting Windows, with one actively exploited zero-day vulnerability. Of the total, eight were rated Critical and the rest Important, with the majority comprising privilege escalation, information disclosure, and remote code execution flaws. The exploited vulnerability, discovered in the wild, could allow threat actors to gain unauthorized access or escalate privileges on affected systems, posing a risk to both organizations and individuals relying on unpatched Windows environments. Microsoft issued immediate guidance to mitigate ongoing risks. This incident underscores the persistent risks from unpatched systems and highlights the continued targeting of widely deployed platforms like Windows. Organizations face heightened pressure to prioritize vulnerability management and timely patching as adversaries quickly weaponize newly disclosed flaws.
Kill Chain
