Patch Tuesday, May 2025 Edition

Summary: Microsoft's May 2025 Patch Tuesday fixed at least 70 vulnerabilities in Windows and related products, including five zero-day flaws already under active exploitation and two more with public proof-of-concept exploits. Two of the exploited zero-days, CVE-2025-32701 and CVE-2025-32706, are privilege-escalation bugs in the Windows Common Log File System driver present in all supported versions of Windows 10, 11, and their server editions; Apple separately released updates fixing at least 30 vulnerabilities in iOS and iPadOS 18.5.
Bottom line: Immersive Labs' Kev Breen notes the average time from public disclosure to exploitation at scale is under five days, and Microsoft's patch notes share no technical details or indicators of compromise, leaving immediate patching as the only mitigation for flaws that can hand attackers the Windows SYSTEM account.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-30051 CVE-2025-30397 CVE-2025-30400 CVE-2025-32701 CVE-2025-32706 CVE-2025-32709
Related: Microsoft Patch Tuesday for May 2025 — Snort rules and prominent vulnerabilities Cyber Risks ·
Microsoft and Adobe Patch Tuesday, May 2025 Security Update Review | Qualys Cyber Risks ·
CVE-2025-30400: Microsoft Windows DWM Core Library Use-After-Free Vulnerability Known Exploited Vulnerabilities · May 13, 2025