Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
Microsoft released its first security update for 2026 on Tuesday, fixing 114 security issues, one of which it said has been actively exploited in the wild.
Eight of the 114 defects have a critical rating, while 106 have an important rating. Up to 58 vulnerabilities have been categorized as privilege escalation, followed by five spoofing flaws, 22 information disclosure, and 21 remote code execution. The update is the third-largest January Patch Tuesday after January 2022 and January 2025, according to statistics gathered by Fortra.
Since the December 2025 Patch Tuesday update, Microsoft has fixed two security flaws in its Edge browser: a spoofing flaw in its Android app (CVE-2025-65046, 3.1) and a case of inadequate policy enforcement in Chromium's WebView tag (CVE-2026-0628, CVSS s...