Patch days / January 2025

Microsoft Patch Tuesday — January 2025

Tuesday, 14 January 2025

Vulnerabilities: 157
Critical: 3
High: 95
Zero-days: 3
Public exploit: 4

Exploited 3

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2025-21333 Zero-day Public exploit Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
EPSS 10%
High 7.8
CVE-2025-21334 Zero-day Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.8
CVE-2025-21335 Zero-day Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
EPSS 1.4%

Critical 3

Critical 9.8
CVE-2025-21298 Public exploit Windows OLE Remote Code Execution Vulnerability
EPSS 74%
Critical 9.8
CVE-2025-21307 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
EPSS 1.9%
Critical 9.8
CVE-2025-21311 Windows NTLM V1 Elevation of Privilege Vulnerability
EPSS 2.3%

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2025-21293 Public exploit Active Directory Domain Services Elevation of Privilege Vulnerability
EPSS 15%
Medium 5.5
CVE-2025-21340 Public exploit Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

All vulnerabilities 157

Critical3 Show

Critical 9.8
CVE-2025-21298 Public exploit Windows OLE Remote Code Execution Vulnerability
EPSS 74%
Critical 9.8
CVE-2025-21307 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
EPSS 1.9%
Critical 9.8
CVE-2025-21311 Windows NTLM V1 Elevation of Privilege Vulnerability
EPSS 2.3%

High95 Show

High 7.8
CVE-2025-21333 Zero-day Public exploit Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
EPSS 10%
High 7.8
CVE-2025-21334 Zero-day Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.8
CVE-2025-21335 Zero-day Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21293 Public exploit Active Directory Domain Services Elevation of Privilege Vulnerability
EPSS 15%
High 8.8
CVE-2025-21176 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2025-21178 Visual Studio Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2025-21223 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2025-21233 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21236 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21237 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21238 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21239 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2025-21240 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21241 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2025-21243 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21244 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21245 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21246 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21248 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2025-21250 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2025-21252 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21266 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2025-21273 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2025-21282 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2025-21286 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2025-21291 Windows Direct Show Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21292 Windows Search Service Elevation of Privilege Vulnerability
High 8.8
CVE-2025-21302 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21303 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21305 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21306 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-21339 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-21409 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-21411 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-21413 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-21417 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.2%
High 8.4
CVE-2025-21354 Microsoft Excel Remote Code Execution Vulnerability
High 8.4
CVE-2025-21362 Microsoft Excel Remote Code Execution Vulnerability
High 8.1
CVE-2025-21224 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
EPSS 1.9%
High 8.1
CVE-2025-21294 Microsoft Digest Authentication Remote Code Execution Vulnerability
EPSS 1.2%
High 8.1
CVE-2025-21295 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
EPSS 1.6%
High 8.1
CVE-2025-21297 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.5%
High 8.1
CVE-2025-21309 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 15%
High 7.8
CVE-2025-21186 Microsoft Access Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2025-21187 Microsoft Power Automate Remote Code Execution Vulnerability
High 7.8
CVE-2025-21234 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21235 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21271 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21275 Windows App Package Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21281 Microsoft COM for Windows Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21287 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21304 Microsoft DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21315 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21326 Internet Explorer Remote Code Execution Vulnerability
EPSS 1.4%
High 7.8
CVE-2025-21338 GDI+ Remote Code Execution Vulnerability
High 7.8
CVE-2025-21344 Microsoft SharePoint Server Remote Code Execution Vulnerability
High 7.8
CVE-2025-21345 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2025-21356 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2025-21360 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21361 Microsoft Outlook Remote Code Execution Vulnerability
High 7.8
CVE-2025-21363 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-21364 Microsoft Excel Security Feature Bypass Vulnerability
EPSS 1.7%
High 7.8
CVE-2025-21365 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-21366 Microsoft Access Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-21370 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21372 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21378 Windows CSC Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21382 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21395 Microsoft Access Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-21402 Microsoft Office OneNote Remote Code Execution Vulnerability
High 7.5
CVE-2025-21171 .NET Remote Code Execution Vulnerability
EPSS 1.7%
High 7.5
CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability
EPSS 1.8%
High 7.5
CVE-2025-21207 Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2025-21218 Windows Kerberos Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2025-21220 Microsoft Message Queuing Information Disclosure Vulnerability
EPSS 2.1%
High 7.5
CVE-2025-21230 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.7%
High 7.5
CVE-2025-21231 IP Helper Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2025-21251 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2025-21270 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.4%
High 7.5
CVE-2025-21276 Windows MapUrlToZone Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2025-21277 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 39%
High 7.5
CVE-2025-21285 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 56%
High 7.5
CVE-2025-21289 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.4%
High 7.5
CVE-2025-21290 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.4%
High 7.5
CVE-2025-21296 BranchCache Remote Code Execution Vulnerability
High 7.5
CVE-2025-21300 Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2025-21330 Windows Remote Desktop Services Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2025-21343 Windows Web Threat Defense User Service Information Disclosure Vulnerability
EPSS 1.4%
High 7.5
CVE-2025-21389 Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
EPSS 2%
High 7.3
CVE-2025-21173 .NET Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.3
CVE-2025-21331 Windows Installer Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.3
CVE-2025-21405 Visual Studio Elevation of Privilege Vulnerability
High 7.2
CVE-2025-21348 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 1.8%
High 7.1
CVE-2025-21299 Windows Kerberos Security Feature Bypass Vulnerability
EPSS 2.2%
High 7.1
CVE-2025-21346 Microsoft Office Security Feature Bypass Vulnerability

Medium58 Show

Medium 6.8
CVE-2025-21211 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2025-21357 Microsoft Outlook Remote Code Execution Vulnerability
Medium 6.6
CVE-2025-21226 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21227 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21228 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21229 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21232 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21249 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21255 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21256 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21258 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21260 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21261 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21263 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21265 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21310 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21324 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21327 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-21341 Windows Digital Media Elevation of Privilege Vulnerability
Medium 6.5
CVE-2025-21193 Active Directory Federation Server Spoofing Vulnerability
Medium 6.5
CVE-2025-21217 Windows NTLM Spoofing Vulnerability
EPSS 2%
Medium 6.5
CVE-2025-21272 Windows COM Server Information Disclosure Vulnerability
Medium 6.5
CVE-2025-21288 Windows COM Server Information Disclosure Vulnerability
Medium 6.5
CVE-2025-21301 Windows Geolocation Service Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2025-21308 Windows Themes Spoofing Vulnerability
EPSS 2.2%
Medium 6.5
CVE-2025-21313 Windows Security Account Manager (SAM) Denial of Service Vulnerability
EPSS 1.7%
Medium 6.5
CVE-2025-21314 Windows SmartScreen Spoofing Vulnerability
EPSS 1.4%
Medium 6.4
CVE-2025-21403 On-Premises Data Gateway Information Disclosure Vulnerability
Medium 6.3
CVE-2025-21393 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.1%
Medium 6.2
CVE-2025-21278 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Medium 6.1
CVE-2025-21202 Windows Recovery Environment Agent Elevation of Privilege Vulnerability
Medium 5.9
CVE-2025-21225 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
EPSS 1.7%
Medium 5.9
CVE-2025-21242 Windows Kerberos Information Disclosure Vulnerability
EPSS 1.6%
Medium 5.6
CVE-2025-21336 Windows Cryptographic Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21340 Public exploit Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Medium 5.5
CVE-2025-21257 Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21274 Windows Event Tracing Denial of Service Vulnerability
Medium 5.5
CVE-2025-21280 Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Medium 5.5
CVE-2025-21284 Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Medium 5.5
CVE-2025-21316 Windows Kernel Memory Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21317 Windows Kernel Memory Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21318 Windows Kernel Memory Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21319 Windows Kernel Memory Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21320 Windows Kernel Memory Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21321 Windows Kernel Memory Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21323 Windows Kernel Memory Information Disclosure Vulnerability
Medium 5.5
CVE-2025-21374 Windows CSC Service Information Disclosure Vulnerability
Medium 4.6
CVE-2025-21213 Secure Boot Security Feature Bypass Vulnerability
Medium 4.6
CVE-2025-21215 Secure Boot Security Feature Bypass Vulnerability
Medium 4.3
CVE-2025-21189 MapUrlToZone Security Feature Bypass Vulnerability
EPSS 2.9%
Medium 4.3
CVE-2025-21219 MapUrlToZone Security Feature Bypass Vulnerability
EPSS 3%
Medium 4.3
CVE-2025-21268 MapUrlToZone Security Feature Bypass Vulnerability
EPSS 1.9%
Medium 4.3
CVE-2025-21269 Windows HTML Platforms Security Feature Bypass Vulnerability
EPSS 4.5%
Medium 4.3
CVE-2025-21328 MapUrlToZone Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 4.3
CVE-2025-21329 MapUrlToZone Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 4.3
CVE-2025-21332 MapUrlToZone Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 4.2
CVE-2025-21210 Windows BitLocker Information Disclosure Vulnerability
EPSS 1.1%
Medium 4.2
CVE-2025-21214 Windows BitLocker Information Disclosure Vulnerability

Low1 Show

Low 2.4
CVE-2025-21312 Windows Smart Card Reader Information Disclosure Vulnerability

Most affected products

Windows Server 2022, 23H2 Edition (Server Core installation) 126 · 3 crit.
Windows Server 2025 124 · 3 crit.
Windows Server 2025 (Server Core installation) 124 · 3 crit.
Windows 11 Version 24H2 120 · 3 crit.
Windows Server 2022 120 · 2 crit.
Windows 10 Version 21H2 119 · 2 crit.
Windows 10 Version 22H2 119 · 2 crit.
Windows 11 version 23H2 119 · 2 crit.
Windows 11 version 22H2 119 · 2 crit.
Windows 11 version 22H3 118 · 2 crit.
Windows Server 2019 116 · 2 crit.
Windows Server 2019 (Server Core installation) 116 · 2 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (14 Jan). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →