Microsoft · Security update · January 13, 2026

KB5073696: January 2026 security update

KB5073696, released January 13, 2026, fixes 37 CVEs across 2 products. One of them is being exploited (CVE-2026-20805); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV2 publicly disclosed
CVEs closed
37
None rated Critical
Exploited
1
CVE-2026-20805
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.1979
97th percentile

Priority of the 37 CVEs

Patch now 1 Urgent 7 High 17 Routine 12

Applies to

Product
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2026-20805 Desktop Window Manager Information Disclosure 5.5 0.0746 KEVExploited
Urgent CVE-2026-20860 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0828 More likely
Urgent CVE-2026-20840 Windows NTFS Remote Code Execution 7.8 0.0459 More likely
Urgent CVE-2026-20843 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege 7.8 0.0342 More likely
Urgent CVE-2026-20820 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0256 More likely
Urgent CVE-2026-20816 Windows Installer Elevation of Privilege 7.8 0.0244 More likely
Urgent CVE-2026-20922 Windows NTFS Remote Code Execution 7.8 0.0108 More likely
Urgent CVE-2023-31096 Agere Windows Modem Driver Elevation of Privilege 7.8 0.0048 DisclosedMore likely
High CVE-2026-20929 Windows HTTP.sys Elevation of Privilege 7.5 0.0287 Exploitation Unlikely
High CVE-2026-20875 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service 7.5 0.0154 Exploitation Less Likely
High CVE-2026-20868 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0139 Exploitation Less Likely
High CVE-2026-20921 Windows SMB Server Elevation of Privilege 7.5 0.0118 Exploitation Unlikely
High CVE-2024-55414 Windows Motorola Soft Modem Driver Elevation of Privilege 7.8 0.0114 Exploitation Unlikely
High CVE-2026-20856 Windows Server Update Service Remote Code Execution 8.1 0.0112 Exploitation Less Likely
High CVE-2026-20849 Windows Kerberos Elevation of Privilege 7.5 0.0101 Exploitation Unlikely
High CVE-2026-20931 Windows Telephony Service Elevation of Privilege 8.0 0.0085 Exploitation Unlikely
High CVE-2026-20919 Windows SMB Server Elevation of Privilege 7.5 0.0080 Exploitation Unlikely
High CVE-2026-20926 Windows SMB Server Elevation of Privilege 7.5 0.0080 Exploitation Unlikely
High CVE-2026-20848 Windows SMB Server Elevation of Privilege 7.5 0.0075 Exploitation Unlikely
High CVE-2026-20934 Windows SMB Server Elevation of Privilege 7.5 0.0075 Exploitation Unlikely
High CVE-2026-0386 Windows Deployment Services Remote Code Execution 7.5 0.0055 Exploitation Unlikely
High CVE-2026-20940 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.0046 Exploitation Unlikely
High CVE-2026-20809 Windows Kernel Memory Elevation of Privilege 7.8 0.0036 Exploitation Less Likely
High CVE-2026-20831 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0030 Exploitation Less Likely
High CVE-2026-20869 Windows Local Session Manager (LSM) Elevation of Privilege 7.0 0.0029 Exploitation Less Likely
Showing 1 to 25 of 37 1Next