January Patch Tuesday hits with 113 fixes, including an actively exploited DWM zero-day
Microsoft’s January Patch Tuesday rolls out updates for at least 113 vulnerabilities across Windows and supported software, eight rated critical. The standout is CVE-2026-20805 in Desktop Window Manager, which is already being exploited in the wild and can be chained with other flaws. Office remote-code execution bugs CVE-2026-20952/20953 are fixed, while legacy Agere modem drivers agrsm64.sys/agrsm.sys were removed due to exploit activity linked to CVE-2023-31096. A separate critical CVE-2026-21265 exposes a Secure Boot bypass tied to expired root certificates, requiring careful BIOS/bootloader updates. Firefox/Firefox ESR patched 34 flaws including CVE-2026-0891/0892, and Chrome WebView CVE-2026-0628 was fixed; Edge/Chrome updates are expected. Per-patch guidance from SANS ISC emphasizes timely patching and checking for install issues.
- Patch Tuesday, January 2026 Edition Krebs on Security
- The January 2026 Security Update Review Zero Day Initiative
- Microsoft Patches Exploited Windows Zero-Day, 111 Other Vulnerabilities SecurityWeek
- Windows 11 KB5074109 & KB5073455 cumulative updates released BleepingComputer
- Microsoft Starts 2026 With a Bang: A Freshly Exploited Zero-Day Dark Reading | Security
Reading Insights
0
2
4 min
vs 5 min read
88%
961 → 113 words
Want the full story? Read the original article
Read on Krebs on Security