# Security updates released in January 2025 - Web page: https://patchblox.com/security/patch-radar/2025/01 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 45 | 153 | 4 | 4 | | macOS | 3 | 75 | 1 | 1 | | Linux | 2,489 | 1,363 | 15 | 15 | ## Patch Tuesday, January 14, 2025 155 CVEs, 10 Critical, 3 exploited, 5 publicly disclosed, in 43 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 133 | 3 | 3 | | Windows 11 | 126 | 3 | 3 | | Windows 10 | 121 | 3 | 3 | | .NET and Visual Studio | 8 | 0 | 0 | | Microsoft Office | 7 | 0 | 0 | | SharePoint Server | 3 | 0 | 0 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5050009](https://patchblox.com/security/data/fix/microsoft/kb5050009.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more | Jan 14, 2025 | Patch now | 130 | 3 | CVE-2025-21333 | | [KB5049984](https://patchblox.com/security/data/fix/microsoft/kb5049984.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | Jan 14, 2025 | Patch now | 128 | 3 | CVE-2025-21333 | | [KB5049981](https://patchblox.com/security/data/fix/microsoft/kb5049981.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | Jan 14, 2025 | Patch now | 121 | 3 | CVE-2025-21333 | | [KB5050021](https://patchblox.com/security/data/fix/microsoft/kb5050021.md) | Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems and 1 more | Jan 14, 2025 | Patch now | 121 | 3 | CVE-2025-21333 | | [KB5049983](https://patchblox.com/security/data/fix/microsoft/kb5049983.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | Jan 14, 2025 | Urgent | 122 | 0 | CVE-2025-21298 | | [KB5050008](https://patchblox.com/security/data/fix/microsoft/kb5050008.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | Jan 14, 2025 | Urgent | 118 | 0 | CVE-2025-21298 | | [KB5049993](https://patchblox.com/security/data/fix/microsoft/kb5049993.md) | Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 and 5 more | Jan 14, 2025 | Urgent | 112 | 0 | CVE-2025-21298 | | [KB5050013](https://patchblox.com/security/data/fix/microsoft/kb5050013.md) | Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for 32-bit Systems, Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for x64-based Systems, Windows 10 for 32-bit Systems and 1 more | Jan 14, 2025 | Urgent | 103 | 0 | CVE-2025-21298 | | [KB5050048](https://patchblox.com/security/data/fix/microsoft/kb5050048.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | Jan 14, 2025 | Urgent | 96 | 0 | CVE-2025-21298 | | [KB5050004](https://patchblox.com/security/data/fix/microsoft/kb5050004.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | Jan 14, 2025 | Urgent | 93 | 0 | CVE-2025-21298 | | [KB5050049](https://patchblox.com/security/data/fix/microsoft/kb5050049.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Jan 14, 2025 | Urgent | 78 | 0 | CVE-2025-21298 | | [KB5050063](https://patchblox.com/security/data/fix/microsoft/kb5050063.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Jan 14, 2025 | Urgent | 73 | 0 | CVE-2025-21298 | | [KB5050006](https://patchblox.com/security/data/fix/microsoft/kb5050006.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Jan 14, 2025 | Urgent | 71 | 0 | CVE-2025-21298 | | [KB5050061](https://patchblox.com/security/data/fix/microsoft/kb5050061.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Jan 14, 2025 | Urgent | 66 | 0 | CVE-2025-21298 | | [KB5049994](https://patchblox.com/security/data/fix/microsoft/kb5049994.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Windows Server 2008 for 32-bit Systems Service Pack 2 and 7 more | Jan 14, 2025 | Urgent | 7 | 0 | CVE-2025-21269 | | [KB5002677](https://patchblox.com/security/data/fix/microsoft/kb5002677.md) | Office Online Server | Jan 14, 2025 | Urgent | 2 | 0 | CVE-2025-21354 | | [KB5002673](https://patchblox.com/security/data/fix/microsoft/kb5002673.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | Jan 14, 2025 | Urgent | 1 | 0 | CVE-2025-21362 | | [KB5045993](https://patchblox.com/security/data/fix/microsoft/kb5045993.md) | .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows | Jan 29, 2025 | High | 4 | 0 | CVE-2024-43485 | | [KB5045998](https://patchblox.com/security/data/fix/microsoft/kb5045998.md) | .NET 6.0 installed on Linux, .NET 6.0 installed on Mac OS, .NET 6.0 installed on Windows | Jan 29, 2025 | High | 3 | 0 | CVE-2024-43485 | | [KB5050526](https://patchblox.com/security/data/fix/microsoft/kb5050526.md) | .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows | Jan 14, 2025 | High | 4 | 0 | CVE-2025-21176 | | [KB5050525](https://patchblox.com/security/data/fix/microsoft/kb5050525.md) | .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows | Jan 14, 2025 | High | 3 | 0 | CVE-2025-21176 | | [KB5049614](https://patchblox.com/security/data/fix/microsoft/kb5049614.md) | Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5049620](https://patchblox.com/security/data/fix/microsoft/kb5049620.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation) | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5049622](https://patchblox.com/security/data/fix/microsoft/kb5049622.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5049624](https://patchblox.com/security/data/fix/microsoft/kb5049624.md) | Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050180](https://patchblox.com/security/data/fix/microsoft/kb5050180.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050181](https://patchblox.com/security/data/fix/microsoft/kb5050181.md) | Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2, Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050182](https://patchblox.com/security/data/fix/microsoft/kb5050182.md) | Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 and 5 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050183](https://patchblox.com/security/data/fix/microsoft/kb5050183.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050184](https://patchblox.com/security/data/fix/microsoft/kb5050184.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012 and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050185](https://patchblox.com/security/data/fix/microsoft/kb5050185.md) | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012 R2 and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050186](https://patchblox.com/security/data/fix/microsoft/kb5050186.md) | Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2, Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050187](https://patchblox.com/security/data/fix/microsoft/kb5050187.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 and 1 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050188](https://patchblox.com/security/data/fix/microsoft/kb5050188.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems and 3 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5050416](https://patchblox.com/security/data/fix/microsoft/kb5050416.md) | Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems and 3 more | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21176 | | [KB5002666](https://patchblox.com/security/data/fix/microsoft/kb5002666.md) | Microsoft SharePoint Server 2019 | Jan 14, 2025 | High | 3 | 0 | CVE-2025-21348 | | [KB5002667](https://patchblox.com/security/data/fix/microsoft/kb5002667.md) | Microsoft SharePoint Server 2019 | Jan 14, 2025 | High | 3 | 0 | CVE-2025-21348 | | [KB5002671](https://patchblox.com/security/data/fix/microsoft/kb5002671.md) | Microsoft SharePoint Enterprise Server 2016 | Jan 14, 2025 | High | 3 | 0 | CVE-2025-21348 | | [KB5002672](https://patchblox.com/security/data/fix/microsoft/kb5002672.md) | Microsoft SharePoint Enterprise Server 2016 | Jan 14, 2025 | High | 3 | 0 | CVE-2025-21348 | | [KB5002676](https://patchblox.com/security/data/fix/microsoft/kb5002676.md) | Microsoft SharePoint Server Subscription Edition | Jan 14, 2025 | High | 3 | 0 | CVE-2025-21348 | | [KB5002670](https://patchblox.com/security/data/fix/microsoft/kb5002670.md) | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) | Jan 14, 2025 | High | 2 | 0 | CVE-2025-21186 | | [KB5002688](https://patchblox.com/security/data/fix/microsoft/kb5002688.md) | Microsoft Access 2016 (32-bit edition), Microsoft Access 2016 (64-bit edition) | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21395 | | [KB5002595](https://patchblox.com/security/data/fix/microsoft/kb5002595.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21346 | | [KB5002675](https://patchblox.com/security/data/fix/microsoft/kb5002675.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | Jan 14, 2025 | High | 1 | 0 | CVE-2025-21346 | | [KB5002656](https://patchblox.com/security/data/fix/microsoft/kb5002656.md) | Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition) | Jan 14, 2025 | Routine | 1 | 0 | CVE-2025-21357 | ## macOS updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [Sequoia 15.3](https://patchblox.com/security/data/fix/macos/sequoia-15.3.md) | Sequoia | Jan 27, 2025 | Patch now | 66 | 1 | CVE-2025-24085 | | [Sonoma 14.7.3](https://patchblox.com/security/data/fix/macos/sonoma-14.7.3.md) | Sonoma | Jan 27, 2025 | Urgent | 44 | 0 | CVE-2025-24118 | | [Ventura 13.7.3](https://patchblox.com/security/data/fix/macos/ventura-13.7.3.md) | Ventura | Jan 27, 2025 | Urgent | 36 | 0 | CVE-2025-24154 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Ubuntu | 1,778 | 319 | 5 | 5 | | Debian | 448 | 424 | 0 | 0 | | sles | 59 | 497 | 9 | 9 | | Red Hat | 51 | 69 | 0 | 0 | | ol | 46 | 80 | 0 | 0 | | almalinux | 43 | 59 | 0 | 0 | | amzn | 38 | 400 | 1 | 1 | | opensuse-leap | 15 | 44 | 0 | 0 | | rocky | 11 | 19 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [SUSE-SU-2025:0043-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0043-1.md) | webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4 on opensuse-leap 15.6, sles 15.6 | Jan 9, 2025 | Patch now | 10 | 2 | CVE-2024-44309 | | [SUSE-SU-2025:0289-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0289-1.md) | kernel-coco, kernel-coco_debug, kernel-source-coco and 1 more on sles 15.6 | Jan 29, 2025 | Patch now | 333 | 2 | CVE-2024-53197 | | [SUSE-SU-2025:0283-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0283-1.md) | nginx on opensuse-leap 15.6, sles 15.6 | Jan 29, 2025 | Patch now | 2 | 1 | CVE-2023-44487 | | [chromium-browser 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-browser-99.0.4844.51-0ubuntu0.18.04.1.md) | chromium-browser on Ubuntu 18.04.6 LTS (bionic) | Jan 17, 2025 | Patch now | 71 | 1 | CVE-2022-0609 | | [chromium-browser-l10n 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-browser-l10n-99.0.4844.51-0ubuntu0.18.04.1.md) | chromium-browser-l10n on Ubuntu 18.04.6 LTS (bionic) | Jan 17, 2025 | Patch now | 71 | 1 | CVE-2022-0609 | | [chromium-chromedriver 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-chromedriver-99.0.4844.51-0ubuntu0.18.04.1.md) | chromium-chromedriver on Ubuntu 18.04.6 LTS (bionic) | Jan 17, 2025 | Patch now | 71 | 1 | CVE-2022-0609 | | [chromium-codecs-ffmpeg 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-99.0.4844.51-0ubuntu0.18.04.1.md) | chromium-codecs-ffmpeg on Ubuntu 18.04.6 LTS (bionic) | Jan 17, 2025 | Patch now | 71 | 1 | CVE-2022-0609 | | [chromium-codecs-ffmpeg-extra 99.0.4844.51-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-99.0.4844.51-0ubuntu0.18.04.1.md) | chromium-codecs-ffmpeg-extra on Ubuntu 18.04.6 LTS (bionic) | Jan 17, 2025 | Patch now | 71 | 1 | CVE-2022-0609 | | [SUSE-SU-2025:0255-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0255-1.md) | kernel-livepatch-SLE15-SP6_Update_1 on sles 15.6 | Jan 27, 2025 | Patch now | 13 | 1 | CVE-2024-36971 | | [SUSE-SU-2025:0263-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0263-1.md) | kernel-livepatch-SLE15-SP6_Update_0 on sles 15.6 | Jan 27, 2025 | Patch now | 6 | 1 | CVE-2024-36971 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo