Microsoft Server security updates, January 2026 (Patch Tuesday 2026-01-13)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in January 2026, including the Patch Tuesday release on 2026-01-13 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 74
Critical: 1
High: 47
In CISA KEV: 2
CVEs: 74

Microsoft server CVEs, January 2026

Jan 13, 2026
Critical [CVE-2026-20963] Microsoft SharePoint Remote Code Execution Vulnerability
Critical9.8ExploitedCISA KEV
Jan 13, 2026
High [CVE-2026-20941] Host Process for Windows Tasks Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20948] Microsoft Word Remote Code Execution Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20931] Windows Telephony Service Elevation of Privilege Vulnerability
High8.0
Jan 13, 2026
High [CVE-2026-20929] Windows HTTP.sys Elevation of Privilege Vulnerability
High7.5
Jan 13, 2026
High [CVE-2026-20874] Windows Management Services Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20871] Desktop Window Manager Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20870] Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20868] Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High8.8
Jan 13, 2026
High [CVE-2026-20863] Win32k Elevation of Privilege Vulnerability
High7.0
Jan 13, 2026
High [CVE-2026-20854] Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
High7.5
Jan 13, 2026
High [CVE-2026-20849] Windows Kerberos Elevation of Privilege Vulnerability
High7.5
Jan 13, 2026
High [CVE-2026-20848] Windows SMB Server Elevation of Privilege Vulnerability
High7.5
Jan 13, 2026
High [CVE-2026-20843] Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20947] Microsoft SharePoint Server Remote Code Execution Vulnerability
High8.8
Jan 13, 2026
High [CVE-2026-21221] Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
High7.0
Jan 13, 2026
High [CVE-2026-20951] Microsoft SharePoint Server Remote Code Execution Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20943] Microsoft Office Click-To-Run Remote Code Execution Vulnerability
High7.0
Jan 13, 2026
High [CVE-2026-20940] Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20924] Windows Management Services Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20922] Windows NTFS Remote Code Execution Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20921] Windows SMB Server Elevation of Privilege Vulnerability
High7.5
Jan 13, 2026
High [CVE-2026-20920] Win32k Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20875] Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
High7.5
Jan 13, 2026
High [CVE-2026-20869] Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
High7.0
Jan 13, 2026
High [CVE-2026-20864] Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20860] Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20859] Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20857] Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20856] Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
High8.1
Jan 13, 2026
High [CVE-2026-20852] Windows Hello Tampering Vulnerability
High7.7
Jan 13, 2026
High [CVE-2026-20844] Windows Clipboard Server Elevation of Privilege Vulnerability
High7.4
Jan 13, 2026
High [CVE-2026-20842] Microsoft DWM Core Library Elevation of Privilege Vulnerability
High7.0
Jan 13, 2026
High [CVE-2026-20837] Windows Media Remote Code Execution Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20836] DirectX Graphics Kernel Elevation of Privilege Vulnerability
High7.0
Jan 13, 2026
High [CVE-2026-20832] Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20831] Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20826] Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20822] Windows Graphics Component Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20820] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20817] Windows Error Reporting Service Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20816] Windows Installer Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20811] Win32k Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20810] Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20809] Windows Kernel Memory Elevation of Privilege Vulnerability
High7.8
Jan 13, 2026
High [CVE-2026-20808] Windows File Explorer Elevation of Privilege Vulnerability
High7.0
Jan 13, 2026
High [CVE-2026-20803] Microsoft SQL Server Elevation of Privilege Vulnerability
High7.2
Jan 13, 2026
High [CVE-2026-0386] Windows Deployment Services Remote Code Execution Vulnerability
High7.5
Jan 13, 2026
Medium [CVE-2026-20958] Microsoft SharePoint Information Disclosure Vulnerability
Medium5.4
Jan 13, 2026
Medium [CVE-2026-20939] Windows File Explorer Information Disclosure Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20936] Windows NDIS Information Disclosure Vulnerability
Medium4.3
Jan 13, 2026
Medium [CVE-2026-20872] NTLM Hash Disclosure Spoofing Vulnerability
Medium6.5
Jan 13, 2026
Medium [CVE-2026-20862] Windows Management Services Information Disclosure Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20959] Microsoft SharePoint Server Spoofing Vulnerability
Medium4.6
Jan 13, 2026
Medium [CVE-2026-20927] Windows SMB Server Denial of Service Vulnerability
Medium5.3
Jan 13, 2026
Medium [CVE-2026-20876] Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Medium6.7
Jan 13, 2026
Medium [CVE-2026-20851] Capability Access Management Service (camsvc) Information Disclosure Vulnerability
Medium6.2
Jan 13, 2026
Medium [CVE-2026-20847] Microsoft Windows File Explorer Spoofing Vulnerability
Medium6.5
Jan 13, 2026
Medium [CVE-2026-20839] Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20838] Windows Kernel Information Disclosure Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20835] Capability Access Management Service (camsvc) Information Disclosure Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20834] Windows Spoofing Vulnerability
Medium4.6
Jan 13, 2026
Medium [CVE-2026-20833] Windows Kerberos Information Disclosure Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20829] TPM Trustlet Information Disclosure Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20828] Windows rndismp6.sys Information Disclosure Vulnerability
Medium4.6
Jan 13, 2026
Medium [CVE-2026-20827] Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20825] Windows Hyper-V Information Disclosure Vulnerability
Medium4.4
Jan 13, 2026
Medium [CVE-2026-20824] Windows Remote Assistance Security Feature Bypass Vulnerability
Medium5.5
Jan 13, 2026
Medium [CVE-2026-20821] Remote Procedure Call Information Disclosure Vulnerability
Medium6.2
Jan 13, 2026
Medium [CVE-2026-20818] Windows Kernel Information Disclosure Vulnerability
Medium6.2
Jan 13, 2026
Medium [CVE-2026-20812] LDAP Tampering Vulnerability
Medium6.5
Jan 13, 2026
Medium [CVE-2026-20805] Desktop Window Manager Information Disclosure Vulnerability
Medium5.5ExploitedCISA KEV
Jan 13, 2026
Medium [CVE-2026-21265] Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
Medium6.4
Jan 13, 2026
Medium [CVE-2026-20962] Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability
Medium4.4

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.