Home › Microsoft Patch Tuesday › January 2025

Microsoft Patch Tuesday, January 2025

·

Microsoft's January 2025 security release, published January 14, 2025: 47 updates fixing 148 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

47
Updates (KBs)
148
CVEs fixed
3
On the CISA KEV list
15
Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-21333Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityCVSS 7.8Exploited
CVE-2025-21334Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityCVSS 7.8Exploited
CVE-2025-21335Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityCVSS 7.8Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-21298Windows OLE Remote Code Execution VulnerabilityCVSS 9.8
CVE-2025-21307Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityCVSS 9.8
CVE-2025-21311Windows NTLM V1 Elevation of Privilege VulnerabilityCVSS 9.8
CVE-2025-21223Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-21233Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-21236Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-21237Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-21238Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-21239Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-21240Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-21241Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8
CVE-2025-21243Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows Server 2008 for 32-bit Systems Service Pack 2 (3)Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) (3)Windows Server 2008 for x64-based Systems Service Pack 2 (3)Windows Server 2008 R2 for x64-based Systems Service Pack 1 (2)Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (2)Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (2)Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (2)Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (2)Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (2)Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) (2)

Every update in this release

All 44 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

UpdateSeverityMax CVSSCVEs fixedProductsAlso
KB5049981 ExploitedCritical9.8121Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based SystemsSupport · Catalog
KB5050021 ExploitedCritical9.8121Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based SystemsSupport · Catalog
KB5050009 ExploitedCritical9.8128Windows Server 2025 (Server Core installation), Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based SystemsSupport · Catalog
KB5049984 ExploitedCritical9.8128Windows Server 2022, 23H2 Edition (Server Core installation)Support · Catalog
KB5050008Critical9.8118Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019Support · Catalog
KB5049983Critical9.8122Windows Server 2022, Windows Server 2022 (Server Core installation)Support · Catalog
KB5050013Critical9.8103Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for 32-bit SystemsSupport · Catalog
KB5049993Critical9.8112Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016Support · Catalog
KB5050004Critical9.893Windows Server 2012, Windows Server 2012 (Server Core installation)Support · Catalog
KB5050048Critical9.896Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)Support · Catalog
KB5050063Critical9.873Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2Support · Catalog
KB5050049Critical9.878Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Support · Catalog
KB5050061Critical9.866Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2Support · Catalog
KB5050006Critical9.871Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)Support · Catalog
KB5050526High8.84.NET 9.0 installed on Linux, .NET 9.0 installed on Mac OS, .NET 9.0 installed on WindowsSupport · Catalog
KB5049688High8.83Microsoft Visual Studio 2015 Update 3Support · Catalog
KB5050525High8.83.NET 8.0 installed on Windows, .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OSSupport · Catalog
KB5049622High8.81Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based SystemsSupport · Catalog
KB5049614High8.81Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016Support · Catalog
KB5050183High8.81Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1Support · Catalog
KB5050180High8.81Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1Support · Catalog
KB5050184High8.81Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012Support · Catalog
KB5050185High8.81Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation), Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2Support · Catalog
KB5050182High8.81Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019Support · Catalog
KB5050187High8.81Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022Support · Catalog
KB5050416High8.81Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based SystemsSupport · Catalog
KB5050188High8.81Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit SystemsSupport · Catalog
KB5049624High8.81Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based SystemsSupport · Catalog
KB5049620High8.81Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation)Support · Catalog
KB5050186High8.81Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2, Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2Support · Catalog
KB5050181High8.81Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2, Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2Support · Catalog
KB5002677High8.42Office Online ServerSupport · Catalog
KB5002673High8.41Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)Support · Catalog
KB5002672High7.83Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002671High7.83Microsoft SharePoint Enterprise Server 2016Support · Catalog
KB5002666High7.83Microsoft SharePoint Server 2019Support · Catalog
KB5002667High7.83Microsoft SharePoint Server 2019Support · Catalog
KB5002676High7.83Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5002670High7.82Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition)Support · Catalog
KB5002688High7.81Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition)Support · Catalog
KB5049994High7.57Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2Support · Catalog
KB5002675High7.11Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)Support · Catalog
KB5002595High7.11Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)Support · Catalog
KB5002656Medium6.71Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)Support · Catalog
Take this release to your AI

Composed from the January 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

See every Patch Tuesday, all months  |  The live Microsoft patch tracker

← December 2024February 2025 →

Now see your own patch state.

Senserva reads your Microsoft 365, Intune, Defender, and Entra ID environment and turns this release into your list: every update still missing, on every device, ranked by what attackers are actually exploiting. The 650+ configuration checks come with it.

1Find it2Fix it3Prove it
Start my free patch auditAll you do is register.
Reference: Microsoft CVE and vulnerability management, ranked by real-world risk, and the Microsoft patching guide.
Data notice: this page is provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative Microsoft advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.