Microsoft January 2025 Security Updates

[Corrine]

The Microsoft January 2025 security updates have been released and consist of 159 new patches to Microsoft products plus third-party CVE's making the total 161.

Of the Microsoft CVEs released, 11 are rated critical and 148 are rated moderate in security. At the time of release, five are listed as being publicly known and three under active attack.

The security updates apply to the following products, features and roles: Windows and Windows Components, Office and Office Components, Hyper-V, SharePoint Server, .NET and Visual Studio, Azure, BitLocker, Remote Desktop Services, and the Windows Virtual Trusted Platform Module.

See the list of KBs at the bottom of the page at January 2025 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates as well as the CVEs with FAQs, Mitigations and/or Workarounds.

Recommended Reading:  See Dustin Childs review and analysis in Zero Day Initiative -- The January 2025 Security Update Review.