Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-31096 | An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys) | 7.8 | <1% | PoC | |
| CVE-2024-30051 | Elevation of Privilege in Microsoft Windows DWM Core Library (Actively Exploited) | 7.8 | 6% | KEVRansomware | KEV |
| CVE-2025-24990 | Untrusted Pointer Dereference in Windows Agere Modem Driver (ltmdm64.sys) | 7.8 | 6% | KEV | KEV |
| CVE-2025-65046 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 3.1 | <1% | ||
| CVE-2026-0628 | Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious… | 8.8 | 7% | ||
| CVE-2026-20805 | Local Information Disclosure in Microsoft Desktop Windows Manager (CVE-2026-20805) | 5.5 | 7% | KEVPoC | KEV |
| CVE-2026-20876 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally | 6.7 | <1% | ||
| CVE-2026-21265 | Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB | 6.4 | 1% |
From the original article
5 min read at thehackernews.com
Microsoft on Tuesday rolled out its first security update for 2026 , addressing 114 security flaws, including one vulnerability that it said has been actively exploited in the wild. Of the 114 flaws, eight are rated Critical, and 106 are rated Important in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.