What will be the first patch of the year? 🚨

Microsoft released a security update (Patch Tuesday) for January 2026, fixing a total of 114 vulnerabilities, coded as follows: Windows 11 KB5074109 and KB5073455. Windows 10 is also updated with code KB5073724.

.

There were three Zero-Day vulnerabilities, one of which was found to have been exploited and two of which were made public before the patch.

.

In this update, Microsoft fixed a total of eight critical vulnerabilities, divided into six Remote Code Execution - RCE vulnerabilities and two Elevation of Privilege vulnerabilities.

.

Details of the vulnerability types that have been addressed are as follows:

- Elevation of Privilege vulnerability: 57 items

- Security Feature Bypass: 3 items

- Remote Code Execution: 22 items

- Information Disclosure: 22 items

- Denial of Service vulnerability: 2 items

- Identity forgery vulnerability (Spoofing): 5 items

.

The figure does not include one Microsoft Edge vulnerability, and a Mariner vulnerability that was fixed earlier in the same month.

.

In addition to Microsoft, other software manufacturers have issued security updates in January 2026, such as Adobe, Cisco, Fortinet, Google (Android), SAP, ServiceNow, Trend Micro, and Veeam, with many fixing severe-level vulnerabilities, including vulnerabilities whose attack code has already been made public.

.

Microsoft recommends that users and administrators implement Windows updates and related products ASAP, specifically Secure Boot-enabled systems and machines that may be affected by the Zero-Day vulnerability, to reduce the risk of cyber attacks.

.

Source: bleepingcomputer

# IT News # Includes IT matters # Cough to know # IT