MICROSOFT PATCH TUESDAY ADDRESSES 112 DEFECTS, INCLUDING ONE ACTIVELY EXPLOITED ZERO-DAY

Summary from the TLDR InfoSec newsletter

Microsoft's January 2026 Patch Tuesday addressed 112 vulnerabilities, including CVE-2026-20805, an actively exploited information disclosure zero-day in Desktop Window Manager (CVSS 5.5) that CISA added to its KEV catalog.