Microsoft Patch Tuesday, May 2025: the CVEs

Microsoft Patch Tuesday May 2025: the CVEs Microsoft published on 13 May 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Apr 2025, Mar 2025, Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.8CVE-2025-32709KEVEPSS 1.8%2025-05-13

   Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

2. 7.8CVE-2025-32706KEVEPSS 2.3%2025-05-13

   Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

3. 7.8CVE-2025-32701KEVEPSS 1.4%2025-05-13

   Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

4. 7.8CVE-2025-30400KEVEPSS 1.9%2025-05-13

   Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

5. 7.5CVE-2025-30397KEVExploitEPSS 27%2025-05-13

   Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.