Microsoft January 2026 Security Updates

[Corrine]

The Microsoft January 2026 security updates have been released and consist of 112 new CVEs to Microsoft products and, with third-party Chromium updates, the total CVEs is 114. 

Of the Microsoft CVEs released, 8 are rated Critical and the rest are rated Important in severity. At the time of release, one is listed as being under active attack and two as publicly known.

The security updates apply to the following products, features and roles: Windows and Windows components, Office and Office Components, Azure, Microsoft Edge (Chromium-based), SharePoint Server, SQL Server, SMB Server, and Windows Management Services.

Information regarding known issues with KBs included in the security updates can be found at the bottom of the page at January 2026 Security Updates - Release Notes - Security Update Guide - Microsoft.

Recommended Reading:  See Dustin Childs complete review and analysis in Zero Day Initiative -- The January 2026 Security Update Review.