Microsoft’s January 2026 security roll‑up includes a newly tracked elevation‑of‑privilege entry — CVE‑2026‑20943 — tied to Microsoft Office Click‑to‑Run (C2R) components, and system administrators should treat the advisory as confirmed and actionable while understanding that public technical...