cve.bz

Microsoft Patch Tuesday, January 2025: the CVEs, page 2

Filter

Microsoft Patch Tuesday January 2025: the CVEs Microsoft published on 14 January 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 6.6CVE-2025-21265EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  2. 6.6CVE-2025-21263EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  3. 6.6CVE-2025-21261EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  4. 6.6CVE-2025-21260EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  5. 6.6CVE-2025-21258EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  6. 5.5CVE-2025-21257EPSS 0.7%

    Windows WLAN AutoConfig Service Information Disclosure Vulnerability

  7. 6.6CVE-2025-21256EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  8. 6.6CVE-2025-21255EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  9. 8.8CVE-2025-21252EPSS 1.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  10. 7.5CVE-2025-21251EPSS 2.6%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  11. 8.8CVE-2025-21250EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  12. 6.6CVE-2025-21249EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  13. 8.8CVE-2025-21248EPSS 1.5%

    Windows Telephony Service Remote Code Execution Vulnerability

  14. 8.8CVE-2025-21246EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  15. 8.8CVE-2025-21245EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  16. 8.8CVE-2025-21244EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  17. 8.8CVE-2025-21243EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  18. 5.9CVE-2025-21242EPSS 1.6%

    Windows Kerberos Information Disclosure Vulnerability

  19. 8.8CVE-2025-21241EPSS 1.5%

    Windows Telephony Service Remote Code Execution Vulnerability

  20. 8.8CVE-2025-21240EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  21. 8.8CVE-2025-21239EPSS 1.5%

    Windows Telephony Service Remote Code Execution Vulnerability

  22. 8.8CVE-2025-21238EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  23. 8.8CVE-2025-21237EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  24. 8.8CVE-2025-21236EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  25. 7.8CVE-2025-21235EPSS 0.6%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  26. 7.8CVE-2025-21234EPSS 0.6%

    Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

  27. 8.8CVE-2025-21233EPSS 1.7%

    Windows Telephony Service Remote Code Execution Vulnerability

  28. 6.6CVE-2025-21232EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  29. 7.5CVE-2025-21231EPSS 2.6%

    IP Helper Denial of Service Vulnerability

  30. 7.5CVE-2025-21230EPSS 2.7%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  31. 6.6CVE-2025-21229EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  32. 6.6CVE-2025-21228EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  33. 6.6CVE-2025-21227EPSS 0.8%

    Windows Digital Media Elevation of Privilege Vulnerability

  34. 6.6CVE-2025-21226EPSS 0.9%

    Windows Digital Media Elevation of Privilege Vulnerability

  35. 5.9CVE-2025-21225EPSS 1.7%

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

  36. 8.1CVE-2025-21224EPSS 1.9%

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

  37. 8.8CVE-2025-21223EPSS 1.6%

    Windows Telephony Service Remote Code Execution Vulnerability

  38. 7.5CVE-2025-21220EPSS 2.1%

    Microsoft Message Queuing Information Disclosure Vulnerability

  39. 4.3CVE-2025-21219EPSS 3.0%

    MapUrlToZone Security Feature Bypass Vulnerability

  40. 7.5CVE-2025-21218EPSS 2.6%

    Windows Kerberos Denial of Service Vulnerability

  41. 6.5CVE-2025-21217EPSS 2.0%

    Windows NTLM Spoofing Vulnerability

  42. 4.6CVE-2025-21215EPSS 0.8%

    Secure Boot Security Feature Bypass Vulnerability

  43. 4.2CVE-2025-21214EPSS 0.7%

    Windows BitLocker Information Disclosure Vulnerability

  44. 4.6CVE-2025-21213EPSS 0.7%

    Secure Boot Security Feature Bypass Vulnerability

  45. 6.8CVE-2025-21211EPSS 0.8%

    Secure Boot Security Feature Bypass Vulnerability

  46. 4.2CVE-2025-21210EPSS 1.1%

    Windows BitLocker Information Disclosure Vulnerability

  47. 7.5CVE-2025-21207EPSS 2.1%

    Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

  48. 6.1CVE-2025-21202EPSS 0.9%

    Windows Recovery Environment Agent Elevation of Privilege Vulnerability

  49. 6.5CVE-2025-21193EPSS 0.7%

    Active Directory Federation Server Spoofing Vulnerability

  50. 4.3CVE-2025-21189EPSS 2.9%

    MapUrlToZone Security Feature Bypass Vulnerability

  51. 7.8CVE-2025-21187EPSS 0.8%

    Microsoft Power Automate Remote Code Execution Vulnerability

  52. 7.8CVE-2025-21186EPSS 1.2%

    Microsoft Access Remote Code Execution Vulnerability

  53. 8.8CVE-2025-21178EPSS 1.6%

    Visual Studio Remote Code Execution Vulnerability

  54. 8.8CVE-2025-21176EPSS 2.4%

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  55. 7.3CVE-2025-21173EPSS 1.3%

    .NET Elevation of Privilege Vulnerability

  56. 7.5CVE-2025-21172EPSS 1.8%

    .NET and Visual Studio Remote Code Execution Vulnerability

  57. 7.5CVE-2025-21171EPSS 1.7%

    .NET Remote Code Execution Vulnerability