CIS Advisories

Critical Patches Issued for Microsoft Products, January 13, 2026

2026-01-13 · Read original ↗

ATT&CK techniques detected

1 predictions

T1078.001Default Accounts

92%

“: perform periodic external penetration tests based on program requirements, no less than annually. external penetration testing must include enterprise and environmental reconnaissance to detect exploitable information. penetration testing requires specialized skills and experie…”

Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.

No matches for .

Loading techniques…

Summary

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.