Microsoft CVE-2026-32225

Organizations should deploy Microsoft's January 2026 security updates immediately through established patch management processes. Fixed versions are Windows 10 1607 build 10.0.14393.9060 or later, Windows 10 1809 build 10.0.17763.8644 or later, Windows 10 21H2 build 10.0.19044.7184 or later, Windows 10 22H2 build 10.0.19045.7184 or later, Windows 11 22H3/23H2 build 10.0.22631.6936 or later, Windows 11 24H2 build 10.0.26100.32690 or later, Windows 11 25H2 build 10.0.26200.8246 or later, Windows 11 26H1 build 10.0.28000.1836 or later, Server 2012 build 6.2.9200.26026 or later, Server 2012 R2 build 6.3.9600.23132 or later, Server 2016 build 10.0.14393.9060 or later, Server 2019 build 10.0.17763.8644 or later, Server 2022 build 10.0.20348.5020 or later, Server 2022 23H2 build 10.0.25398.2274 or later, and Server 2025 build 10.0.26100.32690 or later. Apply updates via Windows Update, WSUS, Configuration Manager, or manual download from the Microsoft Update Catalog. Until patching completes, implement defense-in-depth controls including disabling SMB v1, enforcing email attachment blocking for suspicious file types, enabling Windows Defender Attack Surface Reduction rules, and heightening user awareness regarding untrusted network resources. Full remediation guidance available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32225.