# Security updates released in January 2026 - Web page: https://patchblox.com/security/patch-radar/2026/01 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 27 | 107 | 11 | 11 | | Linux | 12,647 | 3,315 | 199 | 199 | ## Patch Tuesday, January 13, 2026 116 CVEs, 8 Critical, 1 exploited, 2 publicly disclosed, in 26 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 89 | 1 | 1 | | Windows 11 | 88 | 1 | 1 | | Windows 10 | 72 | 1 | 1 | | Microsoft Office | 9 | 1 | 1 | | SharePoint Server | 6 | 0 | 0 | | SQL Server | 1 | 0 | 0 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5002713](https://patchblox.com/security/data/fix/microsoft/kb5002713.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Jan 26, 2026 | Patch now | 1 | 1 | CVE-2026-21509 | | [KB5073379](https://patchblox.com/security/data/fix/microsoft/kb5073379.md) | Windows Server 2025, Windows Server 2025 (Server Core installation) | Jan 13, 2026 | Patch now | 85 | 1 | CVE-2026-20805 | | [KB5074109](https://patchblox.com/security/data/fix/microsoft/kb5074109.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | Jan 13, 2026 | Patch now | 85 | 1 | CVE-2026-20805 | | [KB5073450](https://patchblox.com/security/data/fix/microsoft/kb5073450.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | Jan 13, 2026 | Patch now | 79 | 1 | CVE-2026-20805 | | [KB5073455](https://patchblox.com/security/data/fix/microsoft/kb5073455.md) | Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems | Jan 13, 2026 | Patch now | 79 | 1 | CVE-2026-20805 | | [KB5073457](https://patchblox.com/security/data/fix/microsoft/kb5073457.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Jan 13, 2026 | Patch now | 77 | 1 | CVE-2026-20805 | | [KB5073723](https://patchblox.com/security/data/fix/microsoft/kb5073723.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Jan 13, 2026 | Patch now | 72 | 1 | CVE-2026-20805 | | [KB5073724](https://patchblox.com/security/data/fix/microsoft/kb5073724.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | Jan 13, 2026 | Patch now | 72 | 1 | CVE-2026-20805 | | [KB5073722](https://patchblox.com/security/data/fix/microsoft/kb5073722.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | Jan 13, 2026 | Patch now | 53 | 1 | CVE-2026-20805 | | [KB5073696](https://patchblox.com/security/data/fix/microsoft/kb5073696.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Jan 13, 2026 | Patch now | 37 | 1 | CVE-2026-20805 | | [KB5073698](https://patchblox.com/security/data/fix/microsoft/kb5073698.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Jan 13, 2026 | Patch now | 36 | 1 | CVE-2026-20805 | | [KB5073695](https://patchblox.com/security/data/fix/microsoft/kb5073695.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Jan 13, 2026 | Urgent | 28 | 0 | CVE-2026-20860 | | [KB5073699](https://patchblox.com/security/data/fix/microsoft/kb5073699.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Jan 13, 2026 | Urgent | 28 | 0 | CVE-2026-20860 | | [KB5073697](https://patchblox.com/security/data/fix/microsoft/kb5073697.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Jan 13, 2026 | Urgent | 26 | 0 | CVE-2026-20860 | | [KB5073700](https://patchblox.com/security/data/fix/microsoft/kb5073700.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Jan 13, 2026 | Urgent | 26 | 0 | CVE-2026-20860 | | [KB5002831](https://patchblox.com/security/data/fix/microsoft/kb5002831.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Jan 13, 2026 | Urgent | 3 | 0 | CVE-2026-20957 | | [KB5002826](https://patchblox.com/security/data/fix/microsoft/kb5002826.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Jan 13, 2026 | Urgent | 3 | 0 | CVE-2026-20953 | | [KB5002824](https://patchblox.com/security/data/fix/microsoft/kb5002824.md) | Office Online Server | Jan 13, 2026 | Urgent | 3 | 0 | CVE-2026-20955 | | [KB5002825](https://patchblox.com/security/data/fix/microsoft/kb5002825.md) | Microsoft SharePoint Server 2019 | Jan 13, 2026 | High | 6 | 0 | CVE-2026-20947 | | [KB5002828](https://patchblox.com/security/data/fix/microsoft/kb5002828.md) | Microsoft SharePoint Enterprise Server 2016 | Jan 13, 2026 | High | 6 | 0 | CVE-2026-20947 | | [KB5002822](https://patchblox.com/security/data/fix/microsoft/kb5002822.md) | Microsoft SharePoint Server Subscription Edition | Jan 13, 2026 | High | 5 | 0 | CVE-2026-20947 | | [KB5002823](https://patchblox.com/security/data/fix/microsoft/kb5002823.md) | Microsoft SharePoint Server 2019 | Jan 13, 2026 | High | 2 | 0 | CVE-2026-20947 | | [KB5002827](https://patchblox.com/security/data/fix/microsoft/kb5002827.md) | Microsoft SharePoint Enterprise Server 2016 | Jan 13, 2026 | High | 2 | 0 | CVE-2026-20947 | | [KB5072936](https://patchblox.com/security/data/fix/microsoft/kb5072936.md) | Microsoft SQL Server 2022 for x64-based Systems (CU 22) | Jan 13, 2026 | High | 1 | 0 | CVE-2026-20803 | | [KB5073031](https://patchblox.com/security/data/fix/microsoft/kb5073031.md) | Microsoft SQL Server 2022 for x64-based Systems (GDR) | Jan 13, 2026 | High | 1 | 0 | CVE-2026-20803 | | [KB5073177](https://patchblox.com/security/data/fix/microsoft/kb5073177.md) | Microsoft SQL Server 2025 for x64-based Systems (GDR) | Jan 13, 2026 | High | 1 | 0 | CVE-2026-20803 | | [KB5002829](https://patchblox.com/security/data/fix/microsoft/kb5002829.md) | Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition) | Jan 13, 2026 | High | 1 | 0 | CVE-2026-20948 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Ubuntu | 11,316 | 1,957 | 172 | 172 | | Debian | 526 | 496 | 3 | 3 | | sles | 165 | 681 | 18 | 18 | | Red Hat | 159 | 333 | 2 | 2 | | ol | 115 | 222 | 1 | 1 | | almalinux | 106 | 119 | 0 | 0 | | opensuse-leap | 103 | 352 | 3 | 3 | | rocky | 94 | 116 | 0 | 0 | | amzn | 51 | 142 | 0 | 0 | | Fedora | 12 | 11 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [SUSE-SU-2026:20102-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20102-1.md) | webkit2gtk3, webkit2gtk4 on sles 16.0 | Jan 20, 2026 | Patch now | 30 | 3 | CVE-2025-14174 | | [OPENSUSE-SU-2026:20065-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20065-1.md) | webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4 on opensuse-leap 16.0 | Jan 20, 2026 | Patch now | 30 | 3 | CVE-2025-14174 | | [SUSE-SU-2026:0021-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0021-1.md) | webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4 on opensuse-leap 15.6, sles 15.6, sles 15.7 | Jan 5, 2026 | Patch now | 25 | 3 | CVE-2025-14174 | | [RHSA-2025:23700](https://patchblox.com/security/data/fix/linux/rhsa-2025-23700.md) | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc and 1 more on RHEL 9 | Jan 16, 2026 | Patch now | 7 | 2 | CVE-2025-14174 | | [RHSA-2025:23663](https://patchblox.com/security/data/fix/linux/rhsa-2025-23663.md) | webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc and 1 more on RHEL 8 | Jan 16, 2026 | Patch now | 7 | 2 | CVE-2025-14174 | | [gir1.2-javascriptcoregtk-4.1 2.46.4-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-gir1.2-javascriptcoregtk-4.1-2.46.4-0ubuntu0.24.10.1.md) | gir1.2-javascriptcoregtk-4.1 on Ubuntu 24.10 (oracular) | Jan 16, 2026 | Patch now | 2 | 2 | CVE-2024-44309 | | [gir1.2-javascriptcoregtk-6.0 2.46.4-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-gir1.2-javascriptcoregtk-6.0-2.46.4-0ubuntu0.24.10.1.md) | gir1.2-javascriptcoregtk-6.0 on Ubuntu 24.10 (oracular) | Jan 16, 2026 | Patch now | 2 | 2 | CVE-2024-44309 | | [gir1.2-webkit-6.0 2.46.4-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-gir1.2-webkit-6.0-2.46.4-0ubuntu0.24.10.1.md) | gir1.2-webkit-6.0 on Ubuntu 24.10 (oracular) | Jan 16, 2026 | Patch now | 2 | 2 | CVE-2024-44309 | | [gir1.2-webkit2-4.1 2.46.4-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-gir1.2-webkit2-4.1-2.46.4-0ubuntu0.24.10.1.md) | gir1.2-webkit2-4.1 on Ubuntu 24.10 (oracular) | Jan 16, 2026 | Patch now | 2 | 2 | CVE-2024-44309 | | [libjavascriptcoregtk-4.0-bin 2.46.4-0ubuntu0.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libjavascriptcoregtk-4.0-bin-2.46.4-0ubuntu0.24.10.1.md) | libjavascriptcoregtk-4.0-bin on Ubuntu 24.10 (oracular) | Jan 16, 2026 | Patch now | 2 | 2 | CVE-2024-44309 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo