Skip to the content
The Update Bureau
Security

KB5050009: all 126 vulnerabilities

Cumulative update for Windows Server, version 2025, January 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

126 vulnerabilities fixed
3 exploited 9 critical 117 important
VulnerabilitySeverityCVSS
CVE-2025-21333 Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Important 7.8
CVE-2025-21334 Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Important 7.8
CVE-2025-21335 Exploited
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Important 7.8
Windows OLE Remote Code Execution Vulnerability
Critical 9.8
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Critical 9.8
Windows NTLM V1 Elevation of Privilege Vulnerability
Critical 9.8
Windows Remote Desktop Services Remote Code Execution Vulnerability
Critical 8.1
Microsoft Digest Authentication Remote Code Execution Vulnerability
Critical 8.1
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Critical 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Critical 8.1
Windows Remote Desktop Services Remote Code Execution Vulnerability
Critical 8.1
BranchCache Remote Code Execution Vulnerability
Critical 7.5
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Search Service Elevation of Privilege Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Important 8.1
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Important 7.8
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Important 7.8
Windows App Package Installer Elevation of Privilege Vulnerability
Important 7.8
Microsoft COM for Windows Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability
Important 7.8
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Important 7.8
Internet Explorer Remote Code Execution Vulnerability
Important 7.8
Windows GDI+ Remote Code Execution Vulnerability
Important 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability
Important 7.8
Windows CSC Service Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
Important 7.5
Windows Kerberos Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing Information Disclosure Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
IP Helper Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Windows MapUrlToZone Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
Important 7.5
Windows Remote Desktop Services Denial of Service Vulnerability
Important 7.5
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
Important 7.5
Windows Kerberos Security Feature Bypass Vulnerability
Important 7.1
Secure Boot Security Feature Bypass Vulnerability
Important 6.8
Cert CC: CVE-2024-7344 Howyar Taiwan Secure Boot Bypass
Important 6.7
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Windows Digital Media Elevation of Privilege Vulnerability
Important 6.6
Active Directory Federation Server Spoofing Vulnerability
Important 6.5
Windows NTLM Spoofing Vulnerability
Important 6.5
Windows COM Server Information Disclosure Vulnerability
Important 6.5
Windows COM Server Information Disclosure Vulnerability
Important 6.5
Windows Geolocation Service Information Disclosure Vulnerability
Important 6.5
Windows Themes Spoofing Vulnerability
Important 6.5
Windows Security Account Manager (SAM) Denial of Service Vulnerability
Important 6.5
Windows SmartScreen Spoofing Vulnerability
Important 6.5
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Important 6.2
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
Important 6.1
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Important 5.9
Windows Kerberos Information Disclosure Vulnerability
Important 5.9
Windows Cryptographic Information Disclosure Vulnerability
Important 5.6
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Important 5.5
Windows Event Tracing Denial of Service Vulnerability
Important 5.5
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Important 5.5
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
Important 5.5
Windows Kernel Memory Information Disclosure Vulnerability
Important 5.5
Windows Kernel Memory Information Disclosure Vulnerability
Important 5.5
Windows Kernel Memory Information Disclosure Vulnerability
Important 5.5
Windows Kernel Memory Information Disclosure Vulnerability
Important 5.5
Windows Kernel Memory Information Disclosure Vulnerability
Important 5.5
Windows Kernel Memory Information Disclosure Vulnerability
Important 5.5
Windows Kernel Memory Information Disclosure Vulnerability
Important 5.5
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Important 5.5
Windows CSC Service Information Disclosure Vulnerability
Important 5.5
Secure Boot Security Feature Bypass Vulnerability
Important 4.6
Secure Boot Security Feature Bypass Vulnerability
Important 4.6
MapUrlToZone Security Feature Bypass Vulnerability
Important 4.3
MapUrlToZone Security Feature Bypass Vulnerability
Important 4.3
MapUrlToZone Security Feature Bypass Vulnerability
Important 4.3
Windows HTML Platforms Security Feature Bypass Vulnerability
Important 4.3
MapUrlToZone Security Feature Bypass Vulnerability
Important 4.3
MapUrlToZone Security Feature Bypass Vulnerability
Important 4.3
MapUrlToZone Security Feature Bypass Vulnerability
Important 4.3
Windows BitLocker Information Disclosure Vulnerability
Important 4.2
Windows BitLocker Information Disclosure Vulnerability
Important 4.2