Microsoft Patch Tuesday, January 2025: the CVEs

Microsoft Patch Tuesday January 2025: the CVEs Microsoft published on 14 January 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 9.8CVE-2025-21311EPSS 2.2%2025-01-14

   Windows NTLM V1 Elevation of Privilege Vulnerability

2. 9.8CVE-2025-21307EPSS 1.9%2025-01-14

   Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

3. 9.8CVE-2025-21298EPSS 74%2025-01-14

   Windows OLE Remote Code Execution Vulnerability