Microsoft and Adobe Patch Tuesday, January 2025 Security Update Review | Qualys
Summary: Microsoft's January 2025 Patch Tuesday addressed 159 vulnerabilities, including 10 critical and 149 important severity flaws, and fixed eight zero-day vulnerabilities, three of which were actively exploited in attacks. Adobe released five advisories covering 14 critical vulnerabilities across Substance 3D Stager, Photoshop, Illustrator on iPad, Substance 3D Designer, and Animate, where exploitation could lead to arbitrary code execution.
What you should know: CISA added CVE-2025-21333, CVE-2025-21334, and CVE-2025-21335 to its Known Exploited Vulnerabilities Catalog and set a February 4, 2025 deadline to patch them, so three flaws in this release are already being used in the wild.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-21333CVE-2025-21334CVE-2025-21335
- Related
- Microsoft: Happy 2025. Here’s 161 Security Updates Cyber Risks ·CVE-2025-21333: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Jan 14, 2025CVE-2025-21334: Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Known Exploited Vulnerabilities · Jan 14, 2025