What was in the January 2026 Microsoft Patch Tuesday?

Microsoft released 27 updates fixing 108 CVEs in January 2026, of which 3 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › January 2026

Microsoft Patch Tuesday, January 2026

Released January 13, 2026 · data last refreshed 2026-08-01

Microsoft's January 2026 security release, published January 13, 2026: 27 updates fixing 108 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 3 CVEs from this release are on the Senserva hot list today (as of 2026-08-20), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.

Updates (KBs)

108

CVEs fixed

On the CISA KEV list

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2026-20963Microsoft SharePoint Remote Code Execution VulnerabilityCVSS 9.8Exploited Hot now

CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityCVSS 7.8Exploited Hot now

CVE-2026-20805Desktop Window Manager Information Disclosure VulnerabilityCVSS 5.5Exploited Hot now

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-6965Integer Truncation on SQLiteCVSS 9.8

CVE-2026-20868Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2026-20947Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows 10 Version 1809 for 32-bit Systems (10)Windows 11 Version 25H2 for x64-based Systems (7)Windows 11 Version 25H2 for ARM64-based Systems (7)Windows Server 2019 (7)Microsoft SharePoint Server 2019 (7)Microsoft Office 2019 for 32-bit editions (4)Microsoft Office 2016 (32-bit edition) (4)Microsoft Office 2016 (64-bit edition) (4)Windows Server 2019 (Server Core installation) (4)Windows Server 2022 (4)

Every update in this release

All 27 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

Update	Severity	Max CVSS	CVEs fixed	Products	Also
KB5074109 Exploited	Critical	9.8	86	Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems	Support · Catalog
KB5073723 Exploited	Critical	9.8	73	Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems	Support · Catalog
KB5073457 Exploited	Critical	9.8	78	Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems	Support · Catalog
KB5073724 Exploited	Critical	9.8	73	Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems	Support · Catalog
KB5073379 Exploited	Critical	9.8	86	Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems	Support · Catalog
KB5073455 Exploited	Critical	9.8	80	Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems	Support · Catalog
KB5073450 Exploited	Critical	9.8	80	Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems	Support · Catalog
KB5073722 Exploited	Critical	9.8	54	Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019	Support · Catalog
KB5002825 Exploited	Critical	9.8	7	Microsoft SharePoint Server 2019, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)	Support · Catalog
KB5002828 Exploited	Critical	9.8	7	Microsoft SharePoint Server 2019, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)	Support · Catalog
KB5002822 Exploited	Critical	9.8	6	Microsoft SharePoint Server 2019, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)	Support · Catalog
KB5073698 Exploited	High	8.8	36	Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019	Support · Catalog
KB5073696 Exploited	High	8.8	37	Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019	Support · Catalog
KB5002713 Exploited	High	7.8	1	Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems	Support · Catalog
KB5073697	High	8.8	26	Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022	Support · Catalog
KB5073700	High	8.8	26	Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022	Support · Catalog
KB5073695	High	8.8	28	Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022	Support · Catalog
KB5073699	High	8.8	28	Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022	Support · Catalog
KB5002827	High	8.8	2	Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition	Support · Catalog
KB5002823	High	8.8	2	Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition	Support · Catalog
KB5002826	High	8.4	3	Microsoft SharePoint Server 2019, Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)	Support · Catalog
KB5002831	High	7.8	3	Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems	Support · Catalog
KB5002824	High	7.8	3	Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions	Support · Catalog
KB5002829	High	7.8	1	Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions	Support · Catalog
KB5073031	High	7.2	1	Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 22)	Support · Catalog
KB5073177	High	7.2	1	Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 22)	Support · Catalog
KB5072936	High	7.2	1	Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 22)	Support · Catalog

Take this release to your AI

Composed from the January 2026 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the January 2026 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2026-01, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 27 updates (KBs) fixing 108 CVEs, 3 actively exploited (CISA KEV), 0 ransomware-linked, 11 Critical updates.
Actively exploited CVEs: CVE-2026-20963 (CVSS 9.8), CVE-2026-21509 (CVSS 7.8), CVE-2026-20805 (CVSS 5.5).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← December 2025 February 2026 →