CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

165vulnerabilities fixed (CVEs)

13of them critical

3exploited (zero-day)

5publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday January 2025

165 vulnerabilities

CVE-2025-21333ImportantCVSS 7.8Exploited (zero-day)Elevation of privilege

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5049981 KB5050021 KB5050009 KB5049984 · MSRC

CVE-2025-21334ImportantCVSS 7.8Exploited (zero-day)Elevation of privilege

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5049981 KB5050021 KB5050009 KB5049984 · MSRC

CVE-2025-21335ImportantCVSS 7.8Exploited (zero-day)Elevation of privilege

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5049981 KB5050021 KB5050009 KB5049984 · MSRC

CVE-2025-21415CriticalCVSS 9.9Elevation of privilege

Azure AI Face Service Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2025-21298CriticalCVSS 9.8Remote code execution

Windows OLE Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21307CriticalCVSS 9.8Remote code execution

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21311CriticalCVSS 9.8Elevation of privilege

Windows NTLM V1 Elevation of Privilege Vulnerability

Windows · KB5050009 KB5049984 · MSRC

CVE-2025-21380CriticalCVSS 8.8Information disclosure

Azure Marketplace SaaS Resources Information Disclosure Vulnerability

Azure · MSRC

CVE-2025-21385CriticalCVSS 8.8Information disclosure

Microsoft Purview Information Disclosure Vulnerability

Microsoft Office · MSRC

CVE-2025-21354CriticalCVSS 8.4Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002677 · MSRC

CVE-2025-21362CriticalCVSS 8.4Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002677 KB5002673 · MSRC

CVE-2025-21294CriticalCVSS 8.1Remote code execution

Microsoft Digest Authentication Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21295CriticalCVSS 8.1Remote code execution

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21297CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5050009 KB5049984 · MSRC

CVE-2025-21309CriticalCVSS 8.1Remote code execution

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5050009 KB5049984 · MSRC

CVE-2025-21296CriticalCVSS 7.5Remote code execution

BranchCache Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21176ImportantCVSS 8.8Remote code execution

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · KB5049622 KB5049688 KB5049614 KB5050183 · MSRC

CVE-2025-21178ImportantCVSS 8.8Remote code execution

Visual Studio Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · KB5049688 · MSRC

CVE-2025-21223ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21233ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21236ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21237ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21238ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21239ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21240ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21241ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21243ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21244ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21245ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21246ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21248ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21250ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21252ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21266ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21273ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21282ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21286ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21291ImportantCVSS 8.8Remote code execution

Windows Direct Show Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21292ImportantCVSS 8.8Elevation of privilege

Windows Search Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21293ImportantCVSS 8.8Elevation of privilege

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21302ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21303ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21305ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21306ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21339ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21409ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21411ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21413ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21417ImportantCVSS 8.8Remote code execution

Windows Telephony Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021 · MSRC

CVE-2025-21396ImportantCVSS 8.2Elevation of privilege

Microsoft Account Elevation of Privilege Vulnerability

Azure · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed