Zscaler, working with Microsoft through their MAPP program, has proactively deployed protection for the following 9 vulnerabilities included in the January 2026 Microsoft security bulletins. Zscaler will continue to monitor exploits associated with all vulnerabilities in the January release and deploy additional protections, as necessary.
CVE-2026-20805 – Desktop Window Manager Information Disclosure Vulnerability
Subscriptions Required
CVE-2026-20816 – Windows Installer Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-20817 – Windows Error Reporting Service Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-20820 – Windows Common Log File System Driver Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-20840 – Windows NTFS Remote Code Execution Vulnerability
Subscriptions Required
CVE-2026-20843 – Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-20860 – Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-20871 – Desktop Windows Manager Elevation of Privilege Vulnerability
Subscriptions Required
CVE-2026-20922 – Windows NTFS Remote Code Execution Vulnerability
Subscriptions Required
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
