Microsoft has patched 112 vulnerabilities in January 2026, including CVE-2026-20805, a Desktop Window Manager zero-day that attackers are actively exploiting.
Update to the latest version and monitor for unexpected .git directories in non-repository folders, developers are told.