January 2026 Patch Tuesday

This month’s security updates require immediate attention to both Windows and web browsers. Microsoft has a known exploited vulnerability (CVE-2026-20805) and two publicly disclosed issues, while Mozilla Firefox has two suspected exploited CVEs (CVE-2026-0891 & CVE-2026-0892). Beyond these, expect updates from Adobe, Google, and Oracle, with a focus on Coldfusion and Java-based frameworks as priorities.