# KB5050061: January 2025 security update KB5050061, released January 14, 2025, fixes 66 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5050061 - Platform: Microsoft - Released: Jan 14, 2025 - Priority: Urgent (Closes CVE-2025-21298, exploitation more likely) - CVEs: 66, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5050061 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2008 for 32-bit Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-32-bit-systems-service-pack-2.md) | | | | [Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-32-bit-systems-service-pack-2-server-core-installation.md) | | | | [Windows Server 2008 for x64-based Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-x64-based-systems-service-pack-2.md) | | | | [Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-x64-based-systems-service-pack-2-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-21298](https://patchblox.com/security/data/cve/CVE-2025-21298.md) | Urgent | Windows OLE | 9.8 | 0.7437 | More likely | | [CVE-2025-21307](https://patchblox.com/security/data/cve/CVE-2025-21307.md) | Urgent | Reliable Multicast Transport Driver (RMCAST) | 9.8 | 0.0194 | | | [CVE-2025-21294](https://patchblox.com/security/data/cve/CVE-2025-21294.md) | Urgent | Microsoft Digest Authentication | 8.1 | 0.0123 | | | [CVE-2025-21210](https://patchblox.com/security/data/cve/CVE-2025-21210.md) | Urgent | Windows Virtual Trusted Platform Module | 4.2 | 0.0112 | More likely | | [CVE-2025-21285](https://patchblox.com/security/data/cve/CVE-2025-21285.md) | High | Windows Message Queuing | 7.5 | 0.5616 | | | [CVE-2025-21277](https://patchblox.com/security/data/cve/CVE-2025-21277.md) | High | Windows Message Queuing | 7.5 | 0.3906 | | | [CVE-2025-21230](https://patchblox.com/security/data/cve/CVE-2025-21230.md) | High | Windows Message Queuing | 7.5 | 0.0272 | | | [CVE-2025-21231](https://patchblox.com/security/data/cve/CVE-2025-21231.md) | High | IP Helper | 7.5 | 0.0263 | | | [CVE-2025-21251](https://patchblox.com/security/data/cve/CVE-2025-21251.md) | High | Windows Message Queuing | 7.5 | 0.0263 | | | [CVE-2025-21300](https://patchblox.com/security/data/cve/CVE-2025-21300.md) | High | Windows UPnP Device Host | 7.5 | 0.0257 | | | [CVE-2025-21270](https://patchblox.com/security/data/cve/CVE-2025-21270.md) | High | Windows Message Queuing | 7.5 | 0.0243 | | | [CVE-2025-21289](https://patchblox.com/security/data/cve/CVE-2025-21289.md) | High | Windows Message Queuing | 7.5 | 0.0243 | | | [CVE-2025-21290](https://patchblox.com/security/data/cve/CVE-2025-21290.md) | High | Windows Message Queuing | 7.5 | 0.0243 | | | [CVE-2025-21220](https://patchblox.com/security/data/cve/CVE-2025-21220.md) | High | Windows Message Queuing | 7.5 | 0.0211 | | | [CVE-2025-21389](https://patchblox.com/security/data/cve/CVE-2025-21389.md) | High | Windows UPnP Device Host | 7.5 | 0.0197 | | | [CVE-2025-21233](https://patchblox.com/security/data/cve/CVE-2025-21233.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21236](https://patchblox.com/security/data/cve/CVE-2025-21236.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21237](https://patchblox.com/security/data/cve/CVE-2025-21237.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21238](https://patchblox.com/security/data/cve/CVE-2025-21238.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21240](https://patchblox.com/security/data/cve/CVE-2025-21240.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21243](https://patchblox.com/security/data/cve/CVE-2025-21243.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21244](https://patchblox.com/security/data/cve/CVE-2025-21244.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21245](https://patchblox.com/security/data/cve/CVE-2025-21245.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21246](https://patchblox.com/security/data/cve/CVE-2025-21246.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21250](https://patchblox.com/security/data/cve/CVE-2025-21250.md) | High | Windows Telephony Service | 8.8 | 0.0171 | | | [CVE-2025-21223](https://patchblox.com/security/data/cve/CVE-2025-21223.md) | High | Windows Telephony Service | 8.8 | 0.0164 | | | [CVE-2025-21252](https://patchblox.com/security/data/cve/CVE-2025-21252.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21302](https://patchblox.com/security/data/cve/CVE-2025-21302.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21303](https://patchblox.com/security/data/cve/CVE-2025-21303.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21305](https://patchblox.com/security/data/cve/CVE-2025-21305.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21306](https://patchblox.com/security/data/cve/CVE-2025-21306.md) | High | Windows Telephony Service | 8.8 | 0.0144 | | | [CVE-2025-21266](https://patchblox.com/security/data/cve/CVE-2025-21266.md) | High | Windows Telephony Service | 8.8 | 0.0129 | | | [CVE-2025-21273](https://patchblox.com/security/data/cve/CVE-2025-21273.md) | High | Windows Telephony Service | 8.8 | 0.0129 | | | [CVE-2025-21282](https://patchblox.com/security/data/cve/CVE-2025-21282.md) | High | Windows Telephony Service | 8.8 | 0.0129 | | | [CVE-2025-21286](https://patchblox.com/security/data/cve/CVE-2025-21286.md) | High | Windows Telephony Service | 8.8 | 0.0129 | | | [CVE-2025-21417](https://patchblox.com/security/data/cve/CVE-2025-21417.md) | High | Windows Telephony Service | 8.8 | 0.0119 | | | [CVE-2025-21339](https://patchblox.com/security/data/cve/CVE-2025-21339.md) | High | Windows Telephony Service | 8.8 | 0.0112 | | | [CVE-2025-21409](https://patchblox.com/security/data/cve/CVE-2025-21409.md) | High | Windows Telephony Service | 8.8 | 0.0112 | | | [CVE-2025-21411](https://patchblox.com/security/data/cve/CVE-2025-21411.md) | High | Windows Telephony Service | 8.8 | 0.0112 | | | [CVE-2025-21413](https://patchblox.com/security/data/cve/CVE-2025-21413.md) | High | Windows Telephony Service | 8.8 | 0.0112 | | | [CVE-2025-21331](https://patchblox.com/security/data/cve/CVE-2025-21331.md) | High | Windows Installer | 7.3 | 0.0106 | | | [CVE-2025-21287](https://patchblox.com/security/data/cve/CVE-2025-21287.md) | High | Windows Installer | 7.8 | 0.0055 | | | [CVE-2025-21338](https://patchblox.com/security/data/cve/CVE-2025-21338.md) | High | Windows Win32K - GRFX | 7.8 | 0.0048 | | | [CVE-2025-21217](https://patchblox.com/security/data/cve/CVE-2025-21217.md) | Routine | Windows NTLM | 6.5 | 0.0198 | | | [CVE-2025-21320](https://patchblox.com/security/data/cve/CVE-2025-21320.md) | Routine | Windows Kernel Memory | 5.5 | 0.0099 | | | [CVE-2025-21226](https://patchblox.com/security/data/cve/CVE-2025-21226.md) | Routine | Windows Digital Media | 6.6 | 0.0088 | | | [CVE-2025-21227](https://patchblox.com/security/data/cve/CVE-2025-21227.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21228](https://patchblox.com/security/data/cve/CVE-2025-21228.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21232](https://patchblox.com/security/data/cve/CVE-2025-21232.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21249](https://patchblox.com/security/data/cve/CVE-2025-21249.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21255](https://patchblox.com/security/data/cve/CVE-2025-21255.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21256](https://patchblox.com/security/data/cve/CVE-2025-21256.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21258](https://patchblox.com/security/data/cve/CVE-2025-21258.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21260](https://patchblox.com/security/data/cve/CVE-2025-21260.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21310](https://patchblox.com/security/data/cve/CVE-2025-21310.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21324](https://patchblox.com/security/data/cve/CVE-2025-21324.md) | Routine | Windows Digital Media | 6.6 | 0.0085 | | | [CVE-2025-21215](https://patchblox.com/security/data/cve/CVE-2025-21215.md) | Routine | Windows Boot Manager | 4.6 | 0.0081 | | | [CVE-2025-21261](https://patchblox.com/security/data/cve/CVE-2025-21261.md) | Routine | Windows Digital Media | 6.6 | 0.0077 | | | [CVE-2025-21263](https://patchblox.com/security/data/cve/CVE-2025-21263.md) | Routine | Windows Digital Media | 6.6 | 0.0077 | | | [CVE-2025-21265](https://patchblox.com/security/data/cve/CVE-2025-21265.md) | Routine | Windows Digital Media | 6.6 | 0.0077 | | | [CVE-2025-21327](https://patchblox.com/security/data/cve/CVE-2025-21327.md) | Routine | Windows Digital Media | 6.6 | 0.0077 | | | [CVE-2025-21272](https://patchblox.com/security/data/cve/CVE-2025-21272.md) | Routine | Windows COM | 6.5 | 0.0071 | | | [CVE-2025-21288](https://patchblox.com/security/data/cve/CVE-2025-21288.md) | Routine | Windows COM | 6.5 | 0.0071 | | | [CVE-2025-21341](https://patchblox.com/security/data/cve/CVE-2025-21341.md) | Routine | Windows Digital Media | 6.6 | 0.0071 | | | [CVE-2025-21214](https://patchblox.com/security/data/cve/CVE-2025-21214.md) | Routine | Windows BitLocker | 4.2 | 0.0070 | | | [CVE-2025-21336](https://patchblox.com/security/data/cve/CVE-2025-21336.md) | Routine | Windows Cryptographic Services | 5.6 | 0.0067 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo