Zscaler

Zscaler Deploys Protections for 9 Microsoft Vulnerabilities

First seen 14 Jan 2026, 09:52 UTC • Zscaler

•34.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Zscaler has implemented protective measures against nine vulnerabilities identified in the January 2026 Microsoft security bulletins. The company is collaborating with Microsoft through the MAPP program and will continue to monitor for any exploits related to these vulnerabilities.

How this analysis works

Attack Flow

18 entities, 17 inferred relationships (STIX 2.1).

Vulnerability (17)

CVE-2026-20805
CVE-2026-20816
CVE-2026-20817
CVE-2026-20820
CVE-2026-20840
CVE-2026-20843
CVE-2026-20860
CVE-2026-20871
CVE-2026-20922
Desktop Window Manager Information Disclosure Vulnerability
Desktop Windows Manager Elevation Of Privilege Vulnerability
Windows Ancillary Function Driver For WinSock Elevation Of Privilege Vulnerability
Windows Common Log File System Driver Elevation Of Privilege Vulnerability
Windows Error Reporting Service Elevation Of Privilege Vulnerability
Windows Installer Elevation Of Privilege Vulnerability
Windows NTFS Remote Code Execution Vulnerability
Windows Routing And Remote Access Service (rras) Elevation Of Privilege Vulnerability

Affected Platform (1)

Windows

Relationships

CVE-2026-20805 targets Windows
CVE-2026-20816 targets Windows
CVE-2026-20817 targets Windows
CVE-2026-20820 targets Windows
CVE-2026-20840 targets Windows
CVE-2026-20843 targets Windows
CVE-2026-20860 targets Windows
CVE-2026-20871 targets Windows
CVE-2026-20922 targets Windows
Desktop Window Manager Information Disclosure Vulnerability targets Windows
Desktop Windows Manager Elevation Of Privilege Vulnerability targets Windows
Windows Ancillary Function Driver For WinSock Elevation Of Privilege Vulnerability targets Windows
Windows Common Log File System Driver Elevation Of Privilege Vulnerability targets Windows
Windows Error Reporting Service Elevation Of Privilege Vulnerability targets Windows
Windows Installer Elevation Of Privilege Vulnerability targets Windows
Windows NTFS Remote Code Execution Vulnerability targets Windows
Windows Routing And Remote Access Service (rras) Elevation Of Privilege Vulnerability targets Windows

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 China-linked Cyber Group Expands Targeting to Southeastern Europe China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign China-linked UAT-7290 Targets Telcos in Cyberespionage Campaign UAT-7290 Cyber Espionage Targets South Asian Telecoms APT28 Exploits MSHTML Zero-Day Vulnerability in Windows

Zscaler Deploys Protections for 9 Microsoft Vulnerabilities

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading