Microsoft Patch Tuesday — January 2026
Tuesday, 13 January 2026
Exploited 2
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
- Critical 9.8 EPSS 29%
- Medium 5.5 EPSS 7.5%
Public exploit code 4
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 7.8 EPSS 5.4%
-
High 7.8
CVE-2026-20820 Public exploit Windows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 2.6%
- High 7.5 EPSS 2.9%
- Medium 5.5
All vulnerabilities 112
Critical1 ShowHide
- Critical 9.8 EPSS 29%
High79 ShowHide
- High 8.8 EPSS 1.4%
- High 8.8 EPSS 18%
- High 8.4
- High 8.4
- High 8.4
- High 8.1 EPSS 1.1%
- High 8.0
- High 7.8 EPSS 5.4%
-
High 7.8
CVE-2026-20820 Public exploit Windows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 2.6%
- High 7.8
- High 7.8
- High 7.8
- High 7.8 EPSS 2.4%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8 EPSS 4.6%
-
High 7.8
CVE-2026-20843 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityEPSS 3.4%
- High 7.8
- High 7.8
- High 7.8
- High 7.8 EPSS 8.3%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8 EPSS 4.1%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8 EPSS 1.1%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.7
- High 7.7
- High 7.5 EPSS 2.9%
- High 7.5
- High 7.5
- High 7.5 EPSS 1%
-
High 7.5
CVE-2026-20854 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityEPSS 1.1%
-
High 7.5
CVE-2026-20875 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityEPSS 1.5%
- High 7.5
- High 7.5 EPSS 1.2%
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.4
- High 7.4
- High 7.2 EPSS 1.2%
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
- High 7.0
Medium32 ShowHide
- Medium 5.5 EPSS 7.5%
- Medium 6.7
- Medium 6.5 EPSS 1.1%
- Medium 6.5 EPSS 1.3%
- Medium 6.5 EPSS 20%
- Medium 6.5 EPSS 18%
- Medium 6.4 EPSS 1.1%
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 6.2
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.3
- Medium 4.6
- Medium 4.6
- Medium 4.6 EPSS 7.7%
- Medium 4.4
- Medium 4.4
- Medium 4.3