patch tuesday 2026

  1. CVE-2026-20944 Explained: Remote Delivery, Local Execution in Word RCE

    Microsoft’s January Patch Tuesday included CVE-2026-20944, a Microsoft Word vulnerability described in vendor advisories as a Remote Code Execution (RCE) but scored in CVSS with an Attack Vector of Local (AV:L) — a seeming contradiction that has confused admins and security teams. The short...