Microsoft, Security and 2025 Patch

Patch Tuesday: January 2025 Security Update Patches Exploited Elevation of Privilege Attacks
The January 2025 security update for Windows 11, version 24H2 expands the list of vulnerable drivers that could be used in Bring Your Own Vulnerable Driver attacks. BYOVD Vulnerabilities in kernel drivers could allow threat actors to sneak malware into the kernel.
Microsoft's Largest Patch Tuesday Since 2017: 161 Vulnerabilities Fixed in January 2025 Update
All three zero-day vulnerabilities have a CVSS score of 7.8 and could allow an attacker to gain system privileges.
Microsoft’s big Patch Tuesday fixes over twice as many security flaws as usual
Yesterday was January’s big Patch Tuesday, where Microsoft rolled out a big bundle of security updates across several apps and services, eliminating 159 security vulnerabilities. This is the most extensive Patch Tuesday of the last few years with more than double the usual number of fixed security flaws.
Patch Tuesday Update – January 2025
In this Patch Tuesday edition, Microsoft addressed 159 CVEs, including 8 Zero-Day, 10 Criticals, 147 Important — with 3 Zero-Days actively exploited in the wild and 5 others publicly disclosed. From an Impact perspective,
Microsoft's Patch Tuesday January updates address 8 zero-day vulnerabilities from a total of 159 CVEs
Microsoft released the first Patch Tuesday security updates for Windows addressing 159 CVEs with 8 zero-day threats discovered.
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that have been actively exploited in attacks. Of the 161 flaws,
New Critical Microsoft Windows Warning As 3 Zero-Day Attacks Underway
Microsoft has confirmed that a staggering three zero-day cyberattacks are underway against Windows users—here’s what you need ...
Computer Weekly4d
Biggest Patch Tuesday in years sees Microsoft address 159 vulnerabilities
The largest Patch Tuesday of the 2020s so far brings fixes for over 150 CVEs ranging widely in their scope and severity - ...
ITWire2d
Patch Tuesday Commentary from Tenable
GUEST RESEACH: Microsoft patched a whopping 157 CVEs in its inaugural Patch Tuesday for 2025. Not only is this the largest number of CVEs patched in January, it is the largest number of CVEs ...
Critical Microsoft Outlook Vulnerability Rated 9.8/10 Confirmed—Update Now
A critical-rated Outlook vulnerability has been confirmed by Microsoft which has warned that exploitation is likely—here’s ...
SecurityWeek4d
Microsoft Patches Trio of Exploited Windows Hyper-V Zero-Days
Microsoft has rushed out fixes for a trio of already-exploited zero-day vulnerabilities in the Windows Hyper-V platform.
Krebs on Security4d
Microsoft: Happy 2025. Here’s 161 Security Updates
Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day” weaknesses that are already under active attack. Redmond’s ...
Hosted on MSN3d
Windows Patch Tuesday hits snag with Citrix software, workarounds published
Microsoft starts 2025 as it hopefully doesn't mean to go on Devices that have Citrix's Session Recording software installed ...
Windows Latest4d
Windows 10 KB5049981 out with fixes (direct download .msu)
KB5049981 is the first Patch Tuesday update for this year, and Windows 10 is left high and dry with no new feature additions.