VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday security updates for May 2025 fixed 5 actively exploited zero

Security Affairsby @securityaffairsMay 14, 2025 · 10:08 UTC (May 14, 2025)2 min read1

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-30397 CVE-2025-30400 CVE-2025-32701 CVE-2025-32706 CVE-2025-32709

Tags: cve-2025-30397 cve-2025-30400 cve-2025-32701 cve-2025-32706 cve-2025-32709 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-32706 +4 related CVEs CVE-2025-30400 CVE-2025-32709 CVE-2025-32701 CVE-2025-30397	Heap-Based Buffer Overflow in Windows CLFS Driver Enables Local Privilege Escalation	7.8 group max	2%	KEVPoC ×2	May 13, 2025 KEV May 13, 2025

From the original article

2 min read at securityaffairs.com

Microsoft Patch Tuesday security updates for May 2025 addressed 75 security flaws across multiple products, including five zero-day flaws. Microsoft Patch Tuesday security updates addressed 75 security vulnerabilities in Windows and Windows Components, Office and Office Components, . NET and Visual Studio, Azure, Nuance PowerScribe, Remote Desktop Gateway Service, and Microsoft Defender.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.