Microsoft: Happy 2025. Here’s 161 Security Updates

Summary: Microsoft released 161 security updates in its January 2025 Patch Tuesday, including three zero-day vulnerabilities under active attack in Windows Hyper-V tracked as CVE-2025-21333, CVE-2025-21334, and CVE-2025-21335. The batch also includes nine critical remote code execution flaws, among them CVE-2025-21298 (a 9.8-rated Windows bug triggered by a malicious .rtf file) and CVE-2025-21311, a 9.8-rated flaw in the NTLMv1 authentication protocol.
Why it matters: The three Hyper-V zero-days are privilege-escalation bugs used after an attacker is already inside a system, and one BitLocker fix (CVE-2025-21210) warns that hibernation images may be recoverable in plain text with free tools, potentially exposing passwords, credentials, and PII held in RAM.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-21186 CVE-2025-21210 CVE-2025-21298 CVE-2025-21311 CVE-2025-21333 CVE-2025-21334 CVE-2025-21335 CVE-2025-21366 CVE-2025-21395
Related: Microsoft and Adobe Patch Tuesday, January 2025 Security Update Review | Qualys Cyber Risks ·
Microsoft Patch Tuesday for January 2025 — Snort rules and prominent vulnerabilities Cyber Risks ·
CVE-2025-21333: Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Jan 14, 2025