VulnerabilitycriticalExploited in the wild

Microsoft: Happy 2025. Here’s 161 Security Updates

Krebs on SecurityJan 15, 2025 · 00:00 UTC (Jan 15, 2025)3 min read1 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-21333 CVE-2025-21334 CVE-2025-21335 CVE-2025-21298 CVE-2025-21311 CVE-2025-21210 CVE-2025-21186 CVE-2025-21366 CVE-2025-21395 CVE-2024-49142

Tags: cve-2025-21333 cve-2025-21334 cve-2025-21335 cve-2025-21298 cve-2025-21311 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-49142	Microsoft Access Remote Code Execution Vulnerability	7.8	1%		Dec 12, 2024
CVE-2025-21186 +2 related CVEs CVE-2025-21366 CVE-2025-21395	Microsoft Access Remote Code Execution Vulnerability	7.8	1%		Jan 14, 2025
CVE-2025-21298 +1 related CVE CVE-2025-21210	Use-After-Free RCE in Windows OLE (CVE-2025-21298)	9.8 group max	74%	PoC	Jan 14, 2025
CVE-2025-21311	Windows NTLM V1 Elevation of Privilege Vulnerability	9.8	2%		Jan 14, 2025
CVE-2025-21333 +2 related CVEs CVE-2025-21334 CVE-2025-21335	Actively Exploited Heap Overflow in Windows Hyper-V VSP Enables Privilege Escalation	7.8	10%	KEVPoC	Jan 14, 2025 KEV Jan 14, 2025

From the original article

3 min read at krebsonsecurity.com

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day” weaknesses that are already under active attack. Redmond’s inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since 2017.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.