What was in the January 2025 Microsoft Patch Tuesday?

Microsoft released 44 updates fixing 149 CVEs in January 2025, of which 3 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › January 2025

Please link to this page, it changes often. Thank you! The Senserva Team.

Microsoft Patch Tuesday, January 2025

Released January 14, 2025 · data last refreshed 2026-07-09

Microsoft's January 2025 security release, published January 14, 2025: 44 updates fixing 149 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Updates (KBs)

149

CVEs fixed

Actively exploited

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-21335Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-21333Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-21334Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityCVSS 7.8Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-21298Windows OLE Remote Code Execution VulnerabilityCVSS 9.8

CVE-2025-21307Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityCVSS 9.8

CVE-2025-21311Windows NTLM V1 Elevation of Privilege VulnerabilityCVSS 9.8

CVE-2025-21411Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21413Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21233Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21236Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21237Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21239Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21241Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21243Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-21244Windows Telephony Service Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) (16)Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) (16)Microsoft Visual Studio 2022 version 17.6 (16)Windows 10 Version 1809 for 32-bit Systems (15)Windows 10 Version 1809 for x64-based Systems (14)Windows Server 2019 (14)Microsoft Office 2019 for 32-bit editions (7)Microsoft Office 2019 for 64-bit editions (7)Microsoft SharePoint Enterprise Server 2016 (5)Microsoft SharePoint Server 2019 (5)

Take this release to your AI

Composed from the January 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the January 2025 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2025-01, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 44 updates (KBs) fixing 149 CVEs, 3 actively exploited (CISA KEV), 0 ransomware-linked, 14 Critical updates.
Actively exploited CVEs: CVE-2025-21335 (CVSS 7.8), CVE-2025-21333 (CVSS 7.8), CVE-2025-21334 (CVSS 7.8).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← December 2024 February 2025 →