Microsoft · Security update · January 13, 2026
KB5073700: January 2026 security update
KB5073700, released January 13, 2026, fixes 26 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
Urgent1 publicly disclosedUnsupported product
CVEs closed
26
None rated Critical
Exploited
0
None reported
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.1979
97th percentile
Priority of the 26 CVEs
Patch now 0
Urgent 7
High 11
Routine 8
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2026-20860 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0828 | More likely |
| Urgent | CVE-2026-20840 | Windows NTFS | Remote Code Execution | 7.8 | 0.0459 | More likely |
| Urgent | CVE-2026-20843 | Windows Routing and Remote Access Service (RRAS) | Elevation of Privilege | 7.8 | 0.0342 | More likely |
| Urgent | CVE-2026-20820 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0256 | More likely |
| Urgent | CVE-2026-20816 | Windows Installer | Elevation of Privilege | 7.8 | 0.0244 | More likely |
| Urgent | CVE-2026-20922 | Windows NTFS | Remote Code Execution | 7.8 | 0.0108 | More likely |
| Urgent | CVE-2023-31096 | Agere Windows Modem Driver | Elevation of Privilege | 7.8 | 0.0048 | DisclosedMore likely |
| High | CVE-2026-20929 | Windows HTTP.sys | Elevation of Privilege | 7.5 | 0.0287 | Exploitation Unlikely |
| High | CVE-2026-20875 | Windows Local Security Authority Subsystem Service (LSASS) | Denial of Service | 7.5 | 0.0154 | Exploitation Less Likely |
| High | CVE-2026-20868 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0139 | Exploitation Less Likely |
| High | CVE-2026-20921 | Windows SMB Server | Elevation of Privilege | 7.5 | 0.0118 | Exploitation Unlikely |
| High | CVE-2024-55414 | Windows Motorola Soft Modem Driver | Elevation of Privilege | 7.8 | 0.0114 | Exploitation Unlikely |
| High | CVE-2026-20849 | Windows Kerberos | Elevation of Privilege | 7.5 | 0.0101 | Exploitation Unlikely |
| High | CVE-2026-20931 | Windows Telephony Service | Elevation of Privilege | 8.0 | 0.0085 | Exploitation Unlikely |
| High | CVE-2026-0386 | Windows Deployment Services | Remote Code Execution | 7.5 | 0.0055 | Exploitation Unlikely |
| High | CVE-2026-20940 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.8 | 0.0046 | Exploitation Unlikely |
| High | CVE-2026-20831 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0030 | Exploitation Less Likely |
| High | CVE-2026-20869 | Windows Local Session Manager (LSM) | Elevation of Privilege | 7.0 | 0.0029 | Exploitation Less Likely |
| Routine | CVE-2026-20872 | Windows NTLM | Spoofing | 6.5 | 0.1979 | Exploitation Less Likely |
| Routine | CVE-2026-20925 | Windows NTLM | Spoofing | 6.5 | 0.1793 | Exploitation Less Likely |
| Routine | CVE-2026-20927 | Windows SMB Server | Denial of Service | 5.3 | 0.0091 | Exploitation Unlikely |
| Routine | CVE-2026-20834 | Windows Shell | Spoofing | 4.6 | 0.0074 | Exploitation Less Likely |
| Routine | CVE-2026-20821 | Windows Remote Procedure Call | Information Disclosure | 6.2 | 0.0070 | Exploitation Unlikely |
| Routine | CVE-2026-20828 | Windows Internet Connection Sharing (ICS) | Information Disclosure | 4.6 | 0.0064 | Exploitation Less Likely |
| Routine | CVE-2026-20833 | Windows Kerberos | Information Disclosure | 5.5 | 0.0053 | Exploitation Less Likely |
Showing 1 to 25 of 26
1Next