# KB5050009: January 2025 cumulative update for Windows Server 23H2 KB5050009, released January 14, 2025, fixes 130 CVEs across 4 products. 3 of them are being exploited (CVE-2025-21333); 3 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5050009 - Platform: Microsoft - Released: Jan 14, 2025 - Priority: Patch now (Closes CVE-2025-21333, exploited (CISA KEV)) - CVEs: 130, exploited: 3, on CISA KEV: 3 - Vendor advisory: https://support.microsoft.com/help/5050009 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 11 Version 24H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-24h2-for-arm64-based-systems.md) | | 26100.2894 | | [Windows 11 Version 24H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-24h2-for-x64-based-systems.md) | | 26100.2894 | | [Windows Server 2025](https://patchblox.com/security/data/product/microsoft/windows-server-2025.md) | | 26100.2894 | | [Windows Server 2025 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2025-server-core-installation.md) | | 26100.2894 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-21333](https://patchblox.com/security/data/cve/CVE-2025-21333.md) | Patch now | Windows Hyper-V NT Kernel Integration VSP | 7.8 | 0.1007 | CISA KEV | | [CVE-2025-21334](https://patchblox.com/security/data/cve/CVE-2025-21334.md) | Patch now | Windows Hyper-V NT Kernel Integration VSP | 7.8 | 0.0157 | CISA KEV | | [CVE-2025-21335](https://patchblox.com/security/data/cve/CVE-2025-21335.md) | Patch now | Windows Hyper-V NT Kernel Integration VSP | 7.8 | 0.0140 | CISA KEV | | [CVE-2025-21298](https://patchblox.com/security/data/cve/CVE-2025-21298.md) | Urgent | Windows OLE | 9.8 | 0.7437 | More likely | | [CVE-2025-21309](https://patchblox.com/security/data/cve/CVE-2025-21309.md) | Urgent | Windows Remote Desktop Services | 8.1 | 0.1506 | More likely | | [CVE-2025-21269](https://patchblox.com/security/data/cve/CVE-2025-21269.md) | Urgent | Windows MapUrlToZone | 4.3 | 0.0450 | More likely | | [CVE-2025-21219](https://patchblox.com/security/data/cve/CVE-2025-21219.md) | Urgent | Windows MapUrlToZone | 4.3 | 0.0295 | More likely | | [CVE-2025-21189](https://patchblox.com/security/data/cve/CVE-2025-21189.md) | Urgent | Windows MapUrlToZone | 4.3 | 0.0291 | More likely | | [CVE-2025-21311](https://patchblox.com/security/data/cve/CVE-2025-21311.md) | Urgent | Windows NTLM | 9.8 | 0.0226 | | | [CVE-2025-21299](https://patchblox.com/security/data/cve/CVE-2025-21299.md) | Urgent | Windows Kerberos | 7.1 | 0.0223 | More likely | | [CVE-2025-21268](https://patchblox.com/security/data/cve/CVE-2025-21268.md) | Urgent | Windows MapUrlToZone | 4.3 | 0.0195 | More likely | | [CVE-2025-21307](https://patchblox.com/security/data/cve/CVE-2025-21307.md) | Urgent | Reliable Multicast Transport Driver (RMCAST) | 9.8 | 0.0194 | | | [CVE-2025-21295](https://patchblox.com/security/data/cve/CVE-2025-21295.md) | Urgent | Windows SPNEGO Extended Negotiation | 8.1 | 0.0163 | | | [CVE-2025-21328](https://patchblox.com/security/data/cve/CVE-2025-21328.md) | Urgent | Windows MapUrlToZone | 4.3 | 0.0149 | More likely | | [CVE-2025-21329](https://patchblox.com/security/data/cve/CVE-2025-21329.md) | Urgent | Windows MapUrlToZone | 4.3 | 0.0149 | More likely | | [CVE-2025-21297](https://patchblox.com/security/data/cve/CVE-2025-21297.md) | Urgent | Windows Remote Desktop Services | 8.1 | 0.0146 | | | [CVE-2025-21314](https://patchblox.com/security/data/cve/CVE-2025-21314.md) | Urgent | Windows SmartScreen | 6.5 | 0.0139 | More likely | | [CVE-2025-21294](https://patchblox.com/security/data/cve/CVE-2025-21294.md) | Urgent | Microsoft Digest Authentication | 8.1 | 0.0123 | | | [CVE-2025-21210](https://patchblox.com/security/data/cve/CVE-2025-21210.md) | Urgent | Windows Virtual Trusted Platform Module | 4.2 | 0.0112 | More likely | | [CVE-2024-49120](https://patchblox.com/security/data/cve/CVE-2024-49120.md) | Urgent | Windows Remote Desktop Services | 8.1 | 0.0110 | | | [CVE-2025-21292](https://patchblox.com/security/data/cve/CVE-2025-21292.md) | Urgent | Microsoft Windows Search Component | 8.8 | 0.0083 | More likely | | [CVE-2025-21296](https://patchblox.com/security/data/cve/CVE-2025-21296.md) | Urgent | BranchCache | 7.5 | 0.0079 | | | [CVE-2025-21315](https://patchblox.com/security/data/cve/CVE-2025-21315.md) | Urgent | Microsoft Brokering File System | 7.8 | 0.0065 | More likely | | [CVE-2025-21285](https://patchblox.com/security/data/cve/CVE-2025-21285.md) | High | Windows Message Queuing | 7.5 | 0.5616 | | | [CVE-2025-21277](https://patchblox.com/security/data/cve/CVE-2025-21277.md) | High | Windows Message Queuing | 7.5 | 0.3906 | | | [CVE-2025-21293](https://patchblox.com/security/data/cve/CVE-2025-21293.md) | High | Active Directory Domain Services | 8.8 | 0.1499 | | | [CVE-2025-21230](https://patchblox.com/security/data/cve/CVE-2025-21230.md) | High | Windows Message Queuing | 7.5 | 0.0272 | | | [CVE-2025-21231](https://patchblox.com/security/data/cve/CVE-2025-21231.md) | High | IP Helper | 7.5 | 0.0263 | | | [CVE-2025-21251](https://patchblox.com/security/data/cve/CVE-2025-21251.md) | High | Windows Message Queuing | 7.5 | 0.0263 | | | [CVE-2025-21218](https://patchblox.com/security/data/cve/CVE-2025-21218.md) | High | Windows Kerberos | 7.5 | 0.0263 | | | [CVE-2025-21300](https://patchblox.com/security/data/cve/CVE-2025-21300.md) | High | Windows UPnP Device Host | 7.5 | 0.0257 | | | [CVE-2025-21276](https://patchblox.com/security/data/cve/CVE-2025-21276.md) | High | Windows MapUrlToZone | 7.5 | 0.0246 | | | [CVE-2025-21270](https://patchblox.com/security/data/cve/CVE-2025-21270.md) | High | Windows Message Queuing | 7.5 | 0.0243 | | | [CVE-2025-21289](https://patchblox.com/security/data/cve/CVE-2025-21289.md) | High | Windows Message Queuing | 7.5 | 0.0243 | | | [CVE-2025-21290](https://patchblox.com/security/data/cve/CVE-2025-21290.md) | High | Windows Message Queuing | 7.5 | 0.0243 | | | [CVE-2025-21207](https://patchblox.com/security/data/cve/CVE-2025-21207.md) | High | Windows Connected Devices Platform Service | 7.5 | 0.0214 | | | [CVE-2025-21220](https://patchblox.com/security/data/cve/CVE-2025-21220.md) | High | Windows Message Queuing | 7.5 | 0.0211 | | | [CVE-2025-21330](https://patchblox.com/security/data/cve/CVE-2025-21330.md) | High | Windows Remote Desktop Services | 7.5 | 0.0209 | | | [CVE-2025-21389](https://patchblox.com/security/data/cve/CVE-2025-21389.md) | High | Windows UPnP Device Host | 7.5 | 0.0197 | | | [CVE-2025-21224](https://patchblox.com/security/data/cve/CVE-2025-21224.md) | High | Line Printer Daemon Service (LPD) | 8.1 | 0.0194 | | | [CVE-2025-21233](https://patchblox.com/security/data/cve/CVE-2025-21233.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21236](https://patchblox.com/security/data/cve/CVE-2025-21236.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21237](https://patchblox.com/security/data/cve/CVE-2025-21237.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21238](https://patchblox.com/security/data/cve/CVE-2025-21238.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21240](https://patchblox.com/security/data/cve/CVE-2025-21240.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21243](https://patchblox.com/security/data/cve/CVE-2025-21243.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21244](https://patchblox.com/security/data/cve/CVE-2025-21244.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21245](https://patchblox.com/security/data/cve/CVE-2025-21245.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21246](https://patchblox.com/security/data/cve/CVE-2025-21246.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21250](https://patchblox.com/security/data/cve/CVE-2025-21250.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21223](https://patchblox.com/security/data/cve/CVE-2025-21223.md) | High | Windows Telephony Service | 8.8 | 0.0164 | | | [CVE-2025-21239](https://patchblox.com/security/data/cve/CVE-2025-21239.md) | High | Windows Telephony Service | 8.8 | 0.0151 | | | [CVE-2025-21241](https://patchblox.com/security/data/cve/CVE-2025-21241.md) | High | Windows Telephony Service | 8.8 | 0.0151 | | | [CVE-2025-21248](https://patchblox.com/security/data/cve/CVE-2025-21248.md) | High | Windows Telephony Service | 8.8 | 0.0151 | | | [CVE-2025-21252](https://patchblox.com/security/data/cve/CVE-2025-21252.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21302](https://patchblox.com/security/data/cve/CVE-2025-21302.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21303](https://patchblox.com/security/data/cve/CVE-2025-21303.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21305](https://patchblox.com/security/data/cve/CVE-2025-21305.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21306](https://patchblox.com/security/data/cve/CVE-2025-21306.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2021-45985](https://patchblox.com/security/data/cve/CVE-2021-45985.md) | High | Open Source Software | 7.5 | 0.0142 | | | [CVE-2025-21326](https://patchblox.com/security/data/cve/CVE-2025-21326.md) | High | Internet Explorer | 7.8 | 0.0137 | | | [CVE-2025-21343](https://patchblox.com/security/data/cve/CVE-2025-21343.md) | High | Windows Web Threat Defense User Service | 7.5 | 0.0137 | | | [CVE-2025-21266](https://patchblox.com/security/data/cve/CVE-2025-21266.md) | High | Windows Telephony Service | 8.8 | 0.0129 | | | [CVE-2025-21273](https://patchblox.com/security/data/cve/CVE-2025-21273.md) | High | Windows Telephony Service | 8.8 | 0.0129 | | | [CVE-2025-21282](https://patchblox.com/security/data/cve/CVE-2025-21282.md) | High | Windows Telephony Service | 8.8 | 0.0129 | | | [CVE-2025-21286](https://patchblox.com/security/data/cve/CVE-2025-21286.md) | High | Windows Telephony Service | 8.8 | 0.0129 | | | [CVE-2025-21417](https://patchblox.com/security/data/cve/CVE-2025-21417.md) | High | Windows Telephony Service | 8.8 | 0.0119 | | | [CVE-2025-21339](https://patchblox.com/security/data/cve/CVE-2025-21339.md) | High | Windows Telephony Service | 8.8 | 0.0112 | | | [CVE-2025-21409](https://patchblox.com/security/data/cve/CVE-2025-21409.md) | High | Windows Telephony Service | 8.8 | 0.0112 | | | [CVE-2025-21411](https://patchblox.com/security/data/cve/CVE-2025-21411.md) | High | Windows Telephony Service | 8.8 | 0.0112 | | | [CVE-2025-21413](https://patchblox.com/security/data/cve/CVE-2025-21413.md) | High | Windows Telephony Service | 8.8 | 0.0112 | | | [CVE-2025-21275](https://patchblox.com/security/data/cve/CVE-2025-21275.md) | High | Windows Installer | 7.8 | 0.0062 | Disclosed | | [CVE-2025-21281](https://patchblox.com/security/data/cve/CVE-2025-21281.md) | High | Windows COM | 7.8 | 0.0061 | | | [CVE-2025-21234](https://patchblox.com/security/data/cve/CVE-2025-21234.md) | High | Windows PrintWorkflowUserSvc | 7.8 | 0.0060 | | | [CVE-2025-21235](https://patchblox.com/security/data/cve/CVE-2025-21235.md) | High | Windows PrintWorkflowUserSvc | 7.8 | 0.0060 | | | [CVE-2025-21378](https://patchblox.com/security/data/cve/CVE-2025-21378.md) | High | Windows Client-Side Caching (CSC) Service | 7.8 | 0.0057 | | | [CVE-2025-21287](https://patchblox.com/security/data/cve/CVE-2025-21287.md) | High | Windows Installer | 7.8 | 0.0055 | | | [CVE-2025-21382](https://patchblox.com/security/data/cve/CVE-2025-21382.md) | High | Microsoft Graphics Component | 7.8 | 0.0051 | | | [CVE-2025-21338](https://patchblox.com/security/data/cve/CVE-2025-21338.md) | High | Windows Win32K - GRFX | 7.8 | 0.0048 | | | [CVE-2025-21370](https://patchblox.com/security/data/cve/CVE-2025-21370.md) | High | Windows Virtualization-Based Security (VBS) Enclave | 7.8 | 0.0047 | | | [CVE-2025-21325](https://patchblox.com/security/data/cve/CVE-2025-21325.md) | High | Windows Secure Kernel Mode | 7.8 | 0.0045 | | | [CVE-2025-21372](https://patchblox.com/security/data/cve/CVE-2025-21372.md) | High | Microsoft Brokering File System | 7.8 | 0.0041 | | | [CVE-2025-21308](https://patchblox.com/security/data/cve/CVE-2025-21308.md) | Routine | Windows Themes | 6.5 | 0.0216 | Disclosed | | [CVE-2025-21217](https://patchblox.com/security/data/cve/CVE-2025-21217.md) | Routine | Windows NTLM | 6.5 | 0.0198 | | | [CVE-2025-21313](https://patchblox.com/security/data/cve/CVE-2025-21313.md) | Routine | Windows Security Account Manager | 6.5 | 0.0174 | | | [CVE-2025-21225](https://patchblox.com/security/data/cve/CVE-2025-21225.md) | Routine | Windows Remote Desktop Services | 5.9 | 0.0165 | | | [CVE-2025-21242](https://patchblox.com/security/data/cve/CVE-2025-21242.md) | Routine | Windows Kerberos | 5.9 | 0.0161 | | | [CVE-2025-21301](https://patchblox.com/security/data/cve/CVE-2025-21301.md) | Routine | Windows Geolocation Service | 6.5 | 0.0153 | | | [CVE-2025-21332](https://patchblox.com/security/data/cve/CVE-2025-21332.md) | Routine | Windows MapUrlToZone | 4.3 | 0.0150 | | | [CVE-2024-7344](https://patchblox.com/security/data/cve/CVE-2024-7344.md) | Routine | Windows Secure Boot | 6.7 | 0.0108 | | | [CVE-2025-21316](https://patchblox.com/security/data/cve/CVE-2025-21316.md) | Routine | Windows Kernel Memory | 5.5 | 0.0099 | | | [CVE-2025-21318](https://patchblox.com/security/data/cve/CVE-2025-21318.md) | Routine | Windows Kernel Memory | 5.5 | 0.0099 | | | [CVE-2025-21319](https://patchblox.com/security/data/cve/CVE-2025-21319.md) | Routine | Windows Kernel Memory | 5.5 | 0.0099 | | | [CVE-2025-21320](https://patchblox.com/security/data/cve/CVE-2025-21320.md) | Routine | Windows Kernel Memory | 5.5 | 0.0099 | | | [CVE-2025-21321](https://patchblox.com/security/data/cve/CVE-2025-21321.md) | Routine | Windows Kernel Memory | 5.5 | 0.0099 | | | [CVE-2025-21317](https://patchblox.com/security/data/cve/CVE-2025-21317.md) | Routine | Windows Kernel Memory | 5.5 | 0.0090 | | | [CVE-2025-21323](https://patchblox.com/security/data/cve/CVE-2025-21323.md) | Routine | Windows Kernel Memory | 5.5 | 0.0090 | | | [CVE-2025-21202](https://patchblox.com/security/data/cve/CVE-2025-21202.md) | Routine | Windows Recovery Environment Agent | 6.1 | 0.0089 | | | [CVE-2025-21226](https://patchblox.com/security/data/cve/CVE-2025-21226.md) | Routine | Windows Digital Media | 6.6 | 0.0088 | | | [CVE-2025-21227](https://patchblox.com/security/data/cve/CVE-2025-21227.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21228](https://patchblox.com/security/data/cve/CVE-2025-21228.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21229](https://patchblox.com/security/data/cve/CVE-2025-21229.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21232](https://patchblox.com/security/data/cve/CVE-2025-21232.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21249](https://patchblox.com/security/data/cve/CVE-2025-21249.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21255](https://patchblox.com/security/data/cve/CVE-2025-21255.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21256](https://patchblox.com/security/data/cve/CVE-2025-21256.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21258](https://patchblox.com/security/data/cve/CVE-2025-21258.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21260](https://patchblox.com/security/data/cve/CVE-2025-21260.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21310](https://patchblox.com/security/data/cve/CVE-2025-21310.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21324](https://patchblox.com/security/data/cve/CVE-2025-21324.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21215](https://patchblox.com/security/data/cve/CVE-2025-21215.md) | Routine | Windows Boot Manager | 4.6 | 0.0081 | | | [CVE-2025-21274](https://patchblox.com/security/data/cve/CVE-2025-21274.md) | Routine | Windows Event Tracing | 5.5 | 0.0079 | | | [CVE-2025-21211](https://patchblox.com/security/data/cve/CVE-2025-21211.md) | Routine | Windows Boot Loader | 6.8 | 0.0078 | | | [CVE-2025-21261](https://patchblox.com/security/data/cve/CVE-2025-21261.md) | Routine | Windows Digital Media | 6.6 | 0.0077 | | | [CVE-2025-21263](https://patchblox.com/security/data/cve/CVE-2025-21263.md) | Routine | Windows Digital Media | 6.6 | 0.0077 | | | [CVE-2025-21265](https://patchblox.com/security/data/cve/CVE-2025-21265.md) | Routine | Windows Digital Media | 6.6 | 0.0077 | | | [CVE-2025-21327](https://patchblox.com/security/data/cve/CVE-2025-21327.md) | Routine | Windows Digital Media | 6.6 | 0.0077 | | | [CVE-2025-21193](https://patchblox.com/security/data/cve/CVE-2025-21193.md) | Routine | Active Directory Federation Services | 6.5 | 0.0074 | | | [CVE-2025-21257](https://patchblox.com/security/data/cve/CVE-2025-21257.md) | Routine | Windows WLAN Auto Config Service | 5.5 | 0.0073 | | | [CVE-2025-21213](https://patchblox.com/security/data/cve/CVE-2025-21213.md) | Routine | Windows BitLocker | 4.6 | 0.0072 | | | [CVE-2025-21272](https://patchblox.com/security/data/cve/CVE-2025-21272.md) | Routine | Windows COM | 6.5 | 0.0071 | | | [CVE-2025-21288](https://patchblox.com/security/data/cve/CVE-2025-21288.md) | Routine | Windows COM | 6.5 | 0.0071 | | | [CVE-2025-21341](https://patchblox.com/security/data/cve/CVE-2025-21341.md) | Routine | Windows Digital Media | 6.6 | 0.0071 | | | [CVE-2025-21214](https://patchblox.com/security/data/cve/CVE-2025-21214.md) | Routine | Windows BitLocker | 4.2 | 0.0070 | | | [CVE-2025-21280](https://patchblox.com/security/data/cve/CVE-2025-21280.md) | Routine | Windows Virtual Trusted Platform Module | 5.5 | 0.0067 | | | [CVE-2025-21284](https://patchblox.com/security/data/cve/CVE-2025-21284.md) | Routine | Windows Virtual Trusted Platform Module | 5.5 | 0.0067 | | | [CVE-2025-21336](https://patchblox.com/security/data/cve/CVE-2025-21336.md) | Routine | Windows Cryptographic Services | 5.6 | 0.0067 | | | [CVE-2025-21374](https://patchblox.com/security/data/cve/CVE-2025-21374.md) | Routine | Windows Client-Side Caching (CSC) Service | 5.5 | 0.0059 | | | [CVE-2025-21278](https://patchblox.com/security/data/cve/CVE-2025-21278.md) | Routine | Windows Remote Desktop Services | 6.2 | 0.0057 | | | [CVE-2025-21340](https://patchblox.com/security/data/cve/CVE-2025-21340.md) | Routine | Windows Hello | 5.5 | 0.0046 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo