The January 2025 security update for Windows 11, version 24H2 expands the list of vulnerable drivers that could be used in Bring Your Own Vulnerable Driver attacks. BYOVD Vulnerabilities in kernel drivers could allow threat actors to sneak malware into the kernel.

All three zero-day vulnerabilities have a CVSS score of 7.8 and could allow an attacker to gain system privileges.

Microsoft released the first Patch Tuesday security updates for Windows addressing 159 CVEs with 8 zero-day threats discovered.

The largest Patch Tuesday of the 2020s so far brings fixes for over 150 CVEs ranging widely in their scope and severity - including eight zero-day flaws

Yesterday was January’s big Patch Tuesday, where Microsoft rolled out a big bundle of security updates across several apps and services, eliminating 159 security vulnerabilities. This is the most extensive Patch Tuesday of the last few years with more than double the usual number of fixed security flaws.

This January 2025 Patch Tuesday is bringing the usual roll-up of updates to Windows 10. The updates are available for Windows 10 20H2, Windows 10 21H2, and Windows 10 22H2 (versions 2004, 20H2, and 21H2, respectively) with KB5049981.

Microsoft released security updates for eight zero-day flaws in its first Patch Tuesday of 2025, with three of the vulnerabilities under active exploitation. Microsoft defines zero-day vulnerabilities as software flaws that have either been publicly disclosed or are being actively exploited, with no patch available.

Microsoft has rushed out fixes for a trio of already-exploited zero-day vulnerabilities in the Windows Hyper-V platform.