Microsoft’s confirmation that CVE-2026-20873 is an elevation-of-privilege defect in Windows Management Services (WMS) changes this month’s patch calculus for administrators and incident responders: the issue is vendor-acknowledged, distributed in the January 2026 security rollup, and demands...