Skip to content
OpenAdvisories

Patch days / January 2026

Oracle Critical Patch Update — January 2026

Tuesday, 20 January 2026

Vulnerabilities
66
Critical
2
High
19
Zero-days
0
Public exploit
4

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Critical 1

Public exploit code 3

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

All vulnerabilities 66

Critical2 Show
High19 Show
Medium41 Show
Low4 Show