Microsoft · ServicingStack update · January 14, 2025
KB5050009: January 2025 cumulative update for Windows Server 23H2
KB5050009, released January 14, 2025, fixes 130 CVEs across 4 products. 3 of them are being exploited (CVE-2025-21333); 3 on CISA KEV. Patch Radar priority: Patch now.
Patch now3 on CISA KEV2 publicly disclosed
CVEs closed
130
9 rated Critical
Exploited
3
CVE-2025-21333
Exploitation more likely
13
Vendor assessment
Highest EPSS
0.7437
99th percentile
Priority of the 130 CVEs
Patch now 3
Urgent 20
High 59
Routine 48
Applies to
| Product | Build after install |
|---|---|
| Windows 11 Version 24H2 for ARM64-based Systems | 26100.2894 |
| Windows 11 Version 24H2 for x64-based Systems | 26100.2894 |
| Windows Server 2025 | 26100.2894 |
| Windows Server 2025 (Server Core installation) | 26100.2894 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-21333 | Windows Hyper-V NT Kernel Integration VSP | Elevation of Privilege | 7.8 | 0.1007 | KEVExploited |
| Patch now | CVE-2025-21334 | Windows Hyper-V NT Kernel Integration VSP | Elevation of Privilege | 7.8 | 0.0157 | KEVExploited |
| Patch now | CVE-2025-21335 | Windows Hyper-V NT Kernel Integration VSP | Elevation of Privilege | 7.8 | 0.0140 | KEVExploited |
| Urgent | CVE-2025-21298 | Windows OLE | Remote Code Execution | 9.8 | 0.7437 | More likely |
| Urgent | CVE-2025-21309 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.1506 | More likely |
| Urgent | CVE-2025-21269 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0450 | More likely |
| Urgent | CVE-2025-21219 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0295 | More likely |
| Urgent | CVE-2025-21189 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0291 | More likely |
| Urgent | CVE-2025-21311 | Windows NTLM | Elevation of Privilege | 9.8 | 0.0226 | Exploitation Less Likely |
| Urgent | CVE-2025-21299 | Windows Kerberos | Security Feature Bypass | 7.1 | 0.0223 | More likely |
| Urgent | CVE-2025-21268 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0195 | More likely |
| Urgent | CVE-2025-21307 | Reliable Multicast Transport Driver (RMCAST) | Remote Code Execution | 9.8 | 0.0194 | Exploitation Less Likely |
| Urgent | CVE-2025-21295 | Windows SPNEGO Extended Negotiation | Remote Code Execution | 8.1 | 0.0163 | Exploitation Less Likely |
| Urgent | CVE-2025-21328 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0149 | More likely |
| Urgent | CVE-2025-21329 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0149 | More likely |
| Urgent | CVE-2025-21297 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0146 | Exploitation Less Likely |
| Urgent | CVE-2025-21314 | Windows SmartScreen | Spoofing | 6.5 | 0.0139 | More likely |
| Urgent | CVE-2025-21294 | Microsoft Digest Authentication | Remote Code Execution | 8.1 | 0.0123 | Exploitation Less Likely |
| Urgent | CVE-2025-21210 | Windows Virtual Trusted Platform Module | Information Disclosure | 4.2 | 0.0112 | More likely |
| Urgent | CVE-2024-49120 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0110 | Exploitation Less Likely |
| Urgent | CVE-2025-21292 | Microsoft Windows Search Component | Elevation of Privilege | 8.8 | 0.0083 | More likely |
| Urgent | CVE-2025-21296 | BranchCache | Remote Code Execution | 7.5 | 0.0079 | Exploitation Less Likely |
| Urgent | CVE-2025-21315 | Microsoft Brokering File System | Elevation of Privilege | 7.8 | 0.0065 | More likely |
| High | CVE-2025-21285 | Windows Message Queuing | Denial of Service | 7.5 | 0.5616 | Exploitation Less Likely |
| High | CVE-2025-21277 | Windows Message Queuing | Denial of Service | 7.5 | 0.3906 | Exploitation Less Likely |
Showing 1 to 25 of 130
1Next