cve.bz

Microsoft Patch Tuesday, January 2025: the CVEs

Filter

Microsoft Patch Tuesday January 2025: the CVEs Microsoft published on 14 January 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 8.8CVE-2025-21417EPSS 1.2%

    Windows Telephony Service Remote Code Execution Vulnerability

  2. 8.8CVE-2025-21413EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  3. 8.8CVE-2025-21411EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  4. 8.8CVE-2025-21409EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  5. 7.3CVE-2025-21405EPSS 0.5%

    Visual Studio Elevation of Privilege Vulnerability

  6. 6.4CVE-2025-21403EPSS 0.6%

    On-Premises Data Gateway Information Disclosure Vulnerability

  7. 7.8CVE-2025-21402EPSS 0.7%

    Microsoft Office OneNote Remote Code Execution Vulnerability

  8. 7.8CVE-2025-21395EPSS 1.1%

    Microsoft Access Remote Code Execution Vulnerability

  9. 6.3CVE-2025-21393EPSS 1.1%

    Microsoft SharePoint Server Spoofing Vulnerability

  10. 7.5CVE-2025-21389EPSS 2.0%

    Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.

  11. 7.8CVE-2025-21382EPSS 0.5%

    Windows Graphics Component Elevation of Privilege Vulnerability

  12. 7.8CVE-2025-21378EPSS 0.6%

    Windows CSC Service Elevation of Privilege Vulnerability

  13. 5.5CVE-2025-21374EPSS 0.6%

    Windows CSC Service Information Disclosure Vulnerability

  14. 7.8CVE-2025-21372EPSS 0.4%

    Microsoft Brokering File System Elevation of Privilege Vulnerability

  15. 8.8CVE-2025-21370EPSS 0.5%

    Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

  16. 7.8CVE-2025-21366EPSS 1.1%

    Microsoft Access Remote Code Execution Vulnerability

  17. 7.8CVE-2025-21365EPSS 1.0%

    Microsoft Office Remote Code Execution Vulnerability

  18. 7.8CVE-2025-21364EPSS 1.7%

    Microsoft Excel Security Feature Bypass Vulnerability

  19. 7.8CVE-2025-21363EPSS 0.8%

    Microsoft Word Remote Code Execution Vulnerability

  20. 8.4CVE-2025-21362EPSS 0.9%

    Microsoft Excel Remote Code Execution Vulnerability

  21. 7.8CVE-2025-21361EPSS 0.8%

    Microsoft Outlook Remote Code Execution Vulnerability

  22. 7.8CVE-2025-21360EPSS 0.5%

    Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

  23. 6.7CVE-2025-21357EPSS 0.6%

    Microsoft Outlook Remote Code Execution Vulnerability

  24. 7.8CVE-2025-21356EPSS 0.8%

    Microsoft Office Visio Remote Code Execution Vulnerability

  25. 7.8CVE-2025-21354EPSS 0.9%

    Microsoft Excel Remote Code Execution Vulnerability

  26. 7.2CVE-2025-21348EPSS 1.8%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  27. 7.8CVE-2025-21346EPSS 0.7%

    Microsoft Office Security Feature Bypass Vulnerability

  28. 7.8CVE-2025-21345EPSS 0.6%

    Microsoft Office Visio Remote Code Execution Vulnerability

  29. 7.8CVE-2025-21344EPSS 0.9%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  30. 7.5CVE-2025-21343EPSS 1.4%

    Windows Web Threat Defense User Service Information Disclosure Vulnerability

  31. 6.6CVE-2025-21341EPSS 0.7%

    Windows Digital Media Elevation of Privilege Vulnerability

  32. 5.5CVE-2025-21340EPSS 0.5%

    Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

  33. 8.8CVE-2025-21339EPSS 1.1%

    Windows Telephony Service Remote Code Execution Vulnerability

  34. 7.8CVE-2025-21338EPSS 0.5%

    GDI+ Remote Code Execution Vulnerability

  35. 5.6CVE-2025-21336EPSS 0.7%

    Windows Cryptographic Information Disclosure Vulnerability

  36. 7.8CVE-2025-21335KEVEPSS 1.4%

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

  37. 7.8CVE-2025-21334KEVEPSS 1.6%

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

  38. 7.8CVE-2025-21333KEVExploitEPSS 10%

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

  39. 8.8CVE-2025-21332EPSS 1.5%

    MapUrlToZone Security Feature Bypass Vulnerability

  40. 7.3CVE-2025-21331EPSS 1.1%

    Windows Installer Elevation of Privilege Vulnerability

  41. 7.5CVE-2025-21330EPSS 2.1%

    Windows Remote Desktop Services Denial of Service Vulnerability

  42. 4.3CVE-2025-21329EPSS 1.5%

    MapUrlToZone Security Feature Bypass Vulnerability

  43. 4.3CVE-2025-21328EPSS 1.5%

    MapUrlToZone Security Feature Bypass Vulnerability

  44. 6.6CVE-2025-21327EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  45. 7.8CVE-2025-21326EPSS 1.4%

    Internet Explorer Remote Code Execution Vulnerability

  46. 6.6CVE-2025-21324EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  47. 5.5CVE-2025-21323EPSS 0.9%

    Windows Kernel Memory Information Disclosure Vulnerability

  48. 5.5CVE-2025-21321EPSS 1.0%

    Windows Kernel Memory Information Disclosure Vulnerability

  49. 5.5CVE-2025-21320EPSS 1.0%

    Windows Kernel Memory Information Disclosure Vulnerability

  50. 5.5CVE-2025-21319EPSS 1.0%

    Windows Kernel Memory Information Disclosure Vulnerability

  51. 5.5CVE-2025-21318EPSS 1.0%

    Windows Kernel Memory Information Disclosure Vulnerability

  52. 5.5CVE-2025-21317EPSS 0.9%

    Windows Kernel Memory Information Disclosure Vulnerability

  53. 5.5CVE-2025-21316EPSS 1.0%

    Windows Kernel Memory Information Disclosure Vulnerability

  54. 7.8CVE-2025-21315EPSS 0.7%

    Microsoft Brokering File System Elevation of Privilege Vulnerability

  55. 6.5CVE-2025-21314EPSS 1.4%

    Windows SmartScreen Spoofing Vulnerability

  56. 6.5CVE-2025-21313EPSS 1.7%

    Windows Security Account Manager (SAM) Denial of Service Vulnerability

  57. 2.4CVE-2025-21312EPSS 0.7%

    Windows Smart Card Reader Information Disclosure Vulnerability

  58. 9.8CVE-2025-21311EPSS 2.2%

    Windows NTLM V1 Elevation of Privilege Vulnerability

  59. 6.6CVE-2025-21310EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  60. 8.1CVE-2025-21309EPSS 15%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  61. 6.5CVE-2025-21308EPSS 2.2%

    Windows Themes Spoofing Vulnerability

  62. 9.8CVE-2025-21307EPSS 1.9%

    Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

  63. 8.8CVE-2025-21306EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  64. 8.8CVE-2025-21305EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  65. 7.8CVE-2025-21304EPSS 0.6%

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

  66. 8.8CVE-2025-21303EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  67. 8.8CVE-2025-21302EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  68. 6.5CVE-2025-21301EPSS 1.5%

    Windows Geolocation Service Information Disclosure Vulnerability

  69. 7.5CVE-2025-21300EPSS 2.6%

    Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability

  70. 7.8CVE-2025-21299EPSS 2.2%

    Windows Kerberos Security Feature Bypass Vulnerability

  71. 9.8CVE-2025-21298EPSS 74%

    Windows OLE Remote Code Execution Vulnerability

  72. 8.1CVE-2025-21297EPSS 1.5%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  73. 7.5CVE-2025-21296EPSS 0.8%

    BranchCache Remote Code Execution Vulnerability

  74. 8.1CVE-2025-21295EPSS 1.6%

    SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

  75. 8.1CVE-2025-21294EPSS 1.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  76. 8.8CVE-2025-21293ExploitEPSS 15%

    Active Directory Domain Services Elevation of Privilege Vulnerability

  77. 8.8CVE-2025-21292EPSS 0.8%

    Windows Search Service Elevation of Privilege Vulnerability

  78. 8.8CVE-2025-21291EPSS 1.4%

    Windows Direct Show Remote Code Execution Vulnerability

  79. 7.5CVE-2025-21290EPSS 2.4%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  80. 7.5CVE-2025-21289EPSS 2.4%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  81. 6.5CVE-2025-21288EPSS 0.7%

    Windows COM Server Information Disclosure Vulnerability

  82. 7.8CVE-2025-21287EPSS 0.6%

    Windows Installer Elevation of Privilege Vulnerability

  83. 8.8CVE-2025-21286EPSS 1.3%

    Windows Telephony Service Remote Code Execution Vulnerability

  84. 7.5CVE-2025-21285EPSS 56%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  85. 5.5CVE-2025-21284EPSS 0.7%

    Windows Virtual Trusted Platform Module Denial of Service Vulnerability

  86. 8.8CVE-2025-21282EPSS 1.3%

    Windows Telephony Service Remote Code Execution Vulnerability

  87. 7.8CVE-2025-21281EPSS 0.6%

    Microsoft COM for Windows Elevation of Privilege Vulnerability

  88. 5.5CVE-2025-21280EPSS 0.7%

    Windows Virtual Trusted Platform Module Denial of Service Vulnerability

  89. 5.5CVE-2025-21278EPSS 0.6%

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

  90. 7.5CVE-2025-21277EPSS 39%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  91. 7.5CVE-2025-21276EPSS 2.5%

    Windows MapUrlToZone Denial of Service Vulnerability

  92. 7.8CVE-2025-21275EPSS 0.6%

    Windows App Package Installer Elevation of Privilege Vulnerability

  93. 5.5CVE-2025-21274EPSS 0.8%

    Windows Event Tracing Denial of Service Vulnerability

  94. 8.8CVE-2025-21273EPSS 1.3%

    Windows Telephony Service Remote Code Execution Vulnerability

  95. 6.5CVE-2025-21272EPSS 0.7%

    Windows COM Server Information Disclosure Vulnerability

  96. 7.8CVE-2025-21271EPSS 0.5%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  97. 7.5CVE-2025-21270EPSS 2.4%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  98. 4.3CVE-2025-21269EPSS 4.5%

    Windows HTML Platforms Security Feature Bypass Vulnerability

  99. 4.3CVE-2025-21268EPSS 1.9%

    MapUrlToZone Security Feature Bypass Vulnerability

  100. 8.8CVE-2025-21266EPSS 1.3%

    Windows Telephony Service Remote Code Execution Vulnerability