Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5049981 KB5050021 KB5050009 KB5049984
Patch Tuesday
Patch Tuesday January 2025 – known issues, zero-days and what to do
On 14 Jan 2025 Microsoft fixed 165 vulnerabilities – critical: 13, already exploited (zero-days): 3. Known issues with the updates: none known.
165vulnerabilities
13critical
3zero-days
0known issues
What to do now
- Zero-days first: 3 vulnerabilities are already being exploited (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335) – install the updates as soon as possible, starting with servers and exposed systems.
- 13 critical vulnerabilities (mainly Windows, Microsoft Office, Developer tools (.NET, Visual Studio …)) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5049981 KB5050021 KB5050009 KB5049984
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5049981 KB5050021 KB5050009 KB5049984
Critical vulnerabilities (13)
Azure AI Face Service Elevation of Privilege Vulnerability
Azure
Windows OLE Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021
Windows NTLM V1 Elevation of Privilege Vulnerability
Windows · KB5050009 KB5049984
Azure Marketplace SaaS Resources Information Disclosure Vulnerability
Azure
Microsoft Purview Information Disclosure Vulnerability
Microsoft Office
Show 7 more critical vulnerabilities
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office · KB5002677
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office · KB5002677 KB5002673
Microsoft Digest Authentication Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021
Windows Remote Desktop Services Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5050009 KB5049984
Windows Remote Desktop Services Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5050009 KB5049984
BranchCache Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5050008 KB5049983 KB5049981 KB5050021
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5050009 | Windows | 126 | none known |
| KB5049984 | Windows | 124 | none known |
| KB5049983 | Windows | 120 | none known |
| KB5049981 | Windows | 120 | none known |
| KB5050021 | Windows | 120 | none known |
| KB5050008 | Windows | 116 | none known |
| KB5049993 | Windows | 6 | none known |
| KB5050526 | Developer tools (.NET, Visual Studio …) | 3 | none known |
| KB5049688 | Developer tools (.NET, Visual Studio …) | 3 | none known |
| KB5050013 | Windows | 3 | none known |
| KB5002672 | Microsoft Office | 3 | none known |
| KB5002671 | Microsoft Office | 3 | none known |
Show 21 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5002666 | Microsoft Office | 3 | none known |
| KB5002667 | Microsoft Office | 3 | none known |
| KB5002676 | Microsoft Office | 3 | none known |
| KB5050004 | Windows | 2 | none known |
| KB5002677 | Microsoft Office | 2 | none known |
| KB5050525 | Developer tools (.NET, Visual Studio …) | 2 | none known |
| KB5002670 | Microsoft Office | 2 | none known |
| KB5050049 | Windows | 1 | none known |
| KB5002673 | Microsoft Office | 1 | none known |
| KB5049622 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5049614 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5050183 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5050180 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5050184 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5065426 | Windows | 1 | none known |
| KB5065474 | Windows | 1 | none known |
| KB5095051 | Windows | 1 | none known |
| KB5002675 | Microsoft Office | 1 | none known |
| KB5002595 | Microsoft Office | 1 | none known |
| KB5002656 | Microsoft Office | 1 | none known |
| KB5002688 | Microsoft Office | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.