Microsoft · Security update · January 13, 2026

KB5073695: January 2026 security update

KB5073695, released January 13, 2026, fixes 28 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent1 publicly disclosedUnsupported product
CVEs closed
28
None rated Critical
Exploited
0
None reported
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.1979
97th percentile

Priority of the 28 CVEs

Patch now 0 Urgent 7 High 11 Routine 10

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-20860 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0828 More likely
Urgent CVE-2026-20840 Windows NTFS Remote Code Execution 7.8 0.0459 More likely
Urgent CVE-2026-20843 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege 7.8 0.0342 More likely
Urgent CVE-2026-20820 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0256 More likely
Urgent CVE-2026-20816 Windows Installer Elevation of Privilege 7.8 0.0244 More likely
Urgent CVE-2026-20922 Windows NTFS Remote Code Execution 7.8 0.0108 More likely
Urgent CVE-2023-31096 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0048 DisclosedMore likely
High CVE-2026-20929 Windows HTTP.sys Elevation of Privilege 7.5 0.0287 Exploitation Unlikely
High CVE-2026-20875 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service 7.5 0.0154 Exploitation Less Likely
High CVE-2026-20868 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0139 Exploitation Less Likely
High CVE-2026-20921 Windows SMB Server Elevation of Privilege 7.5 0.0118 Exploitation Unlikely
High CVE-2024-55414 Windows Motorola Soft Modem Driver Elevation of Privilege 7.8 0.0114 Exploitation Unlikely
High CVE-2026-20849 Windows Kerberos Elevation of Privilege 7.5 0.0101 Exploitation Unlikely
High CVE-2026-20931 Windows Telephony Service Elevation of Privilege 8.0 0.0085 Exploitation Unlikely
High CVE-2026-0386 Windows Deployment Services Remote Code Execution 7.5 0.0055 Exploitation Unlikely
High CVE-2026-20940 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.0046 Exploitation Unlikely
High CVE-2026-20831 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0030 Exploitation Less Likely
High CVE-2026-20869 Windows Local Session Manager (LSM) Elevation of Privilege 7.0 0.0029 Exploitation Less Likely
Routine CVE-2026-20872 Windows NTLM Spoofing 6.5 0.1979 Exploitation Less Likely
Routine CVE-2026-20925 Windows NTLM Spoofing 6.5 0.1793 Exploitation Less Likely
Routine CVE-2026-20847 Windows Shell Spoofing 6.5 0.0134 Exploitation Unlikely
Routine CVE-2026-20927 Windows SMB Server Denial of Service 5.3 0.0091 Exploitation Unlikely
Routine CVE-2026-20834 Windows Shell Spoofing 4.6 0.0074 Exploitation Less Likely
Routine CVE-2026-20821 Windows Remote Procedure Call Information Disclosure 6.2 0.0070 Exploitation Unlikely
Routine CVE-2026-20828 Windows Internet Connection Sharing (ICS) Information Disclosure 4.6 0.0064 Exploitation Less Likely
Showing 1 to 25 of 28 1Next