Microsoft has released updates to address multiple vulnerabilities in Microsoft software with Microsoft's January 2026 Patch Tuesday.

Of the fixed vulnerabilities: 57 are elevation of privilege vulnerabilities, 3 are Security Feature Bypass vulnerabilities, 22 are remote code execution vulnerabilities, 22 are information disclosure vulnerabilities, 2 are denial of service vulnerabilities and 5 are Spoofing Vulnerabilities.

This month's Patch Tuesday also includes fixes for 3 zero-day vulnerabilities:

• CVE-2026-20805 — Desktop Window Manager Information Disclosure Vulnerability;

• CVE-2026-21265 — Secure Boot Certificate Expiration Security Feature Bypass Vulnerability;

• CVE-2023-31096 — Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability.

More information on vulnerabilities and updates is available in the Microsoft’s January 2026 Security Updates page – microsoft.com

Source: bleepingcomputer.com