Microsoft Patch Tuesday for January 2026 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20805 | Local Information Disclosure in Microsoft Desktop Windows Manager (CVE-2026-20805) | 5.5 | 7% | KEVPoC | KEV |
| CVE-2026-20860 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… | 7.8 group max | 8% | ||
CVE-2026-20817+1 related CVE | Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally | 7.8 | 5% | PoC | |
| CVE-2026-20854 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to execute code over a network | 7.5 | 1% | ||
| CVE-2026-20876 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally | 6.7 | <1% | ||
CVE-2026-20953+4 related CVEs | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | 8.4 group max | <1% |
From the original article
4 min read at blog.talosintelligence.com
Microsoft has released its monthly security update for January 2026, which includes 112 vulnerabilities affecting a range of products, including 8 that Microsoft marked as “critical”. In this month's release, Microsoft observed one of the included “important” vulnerabilities, CVE-2026-20805 , as being exploited in the wild.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.