VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday updates for January 2025 fixed three actively exploited flaws

Security Affairsby @securityaffairsJan 15, 2025 · 21:45 UTC (Jan 15, 2025)1 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-21333 CVE-2025-21334 CVE-2025-21335 CVE-2025-21298 CVE-2025-21297 CVE-2025-21309

Tags: cve-2025-21333 cve-2025-21334 cve-2025-21335 cve-2025-21298 cve-2025-21297 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-21309 +1 related CVE CVE-2025-21297	Windows Remote Desktop Services Remote Code Execution Vulnerability	8.1	15%		Jan 14, 2025
CVE-2025-21298	Use-After-Free RCE in Windows OLE (CVE-2025-21298)	9.8	74%	PoC	Jan 14, 2025
CVE-2025-21333 +2 related CVEs CVE-2025-21334 CVE-2025-21335	Actively Exploited Heap Overflow in Windows Hyper-V VSP Enables Privilege Escalation	7.8	10%	KEVPoC	Jan 14, 2025 KEV Jan 14, 2025

From the original article

1 min read at securityaffairs.com

Microsoft Patch Tuesday security updates for January 2025 addressed 161 vulnerabilities, including three actively exploited issues. Microsoft Patch Tuesday security updates for January 2025 addressed 161 vulnerabilities in Windows and Windows Components, Office and Office Components, Hyper-V, SharePoint Server, .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.