patch tuesday 2026

Microsoft has confirmed that its January 2026 Patch Tuesday updates for Windows 11 introduced multiple regressions and has already shipped targeted fixes to address the most disruptive problems, but mixed reports and unacknowledged reports mean administrators and power users must act carefully...

A new, deceptively simple attack named “Reprompt” has exposed a critical weakness in Microsoft Copilot Personal: with a single click on a legitimate Copilot deep link an attacker could, under the right conditions, mount a multistage, stealthy data‑exfiltration chain that pulls names, locations...

Microsoft’s January 2026 Patch Tuesday brings a focused, security-first cumulative update to Windows 11 and Windows Server platforms: consumer and managed devices receive fixes rather than flashy features, while server editions are updated with distinct KB identifiers and targeted enterprise...

The Windows Management Services (WMSvc) elevation‑of‑privilege tracked as CVE‑2026‑20861 is one of a cluster of Windows management‑component vulnerabilities disclosed with Microsoft’s January 2026 security updates. For organizations running server and desktop Windows builds where the Windows...

Microsoft has assigned CVE-2026-20854 to a newly disclosed vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) that Microsoft and several security vendors classify as a critical remote code execution risk; the flaw was included in the January 2026 Patch Tuesday...

Microsoft’s January Patch Tuesday included CVE-2026-20944, a Microsoft Word vulnerability described in vendor advisories as a Remote Code Execution (RCE) but scored in CVSS with an Attack Vector of Local (AV:L) — a seeming contradiction that has confused admins and security teams. The short...