The January 2025 security update for Windows 11, version 24H2 expands the list of vulnerable drivers that could be used in Bring Your Own Vulnerable Driver attacks. BYOVD Vulnerabilities in kernel drivers could allow threat actors to sneak malware into the kernel.

All three zero-day vulnerabilities have a CVSS score of 7.8 and could allow an attacker to gain system privileges.

Microsoft fixed over 150 vulnerabilities on Update Tuesday in January. These include 11 security vulnerabilities categorised as critical and several Windows vulnerabilities that are already being exploited for attacks.

The largest Patch Tuesday of the 2020s so far brings fixes for over 150 CVEs ranging widely in their scope and severity - including eight zero-day flaws

Patch Tuesday cumulative update It fixes more than 150 vulnerabilities, including three being actively abused in the wild Other details about the flaws are not being disclosed at this time The first Microsoft Patch Tuesday of 2025 is upon us,

Microsoft released the first Patch Tuesday security updates for Windows addressing 159 CVEs with 8 zero-day threats discovered.

Microsoft has focused its January 2025 patch tuesday cycle on fixing critical Hyper-V and OLE flaws, securing virtualized environments and enterprise workflows.

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day” weaknesses that are already under active attack. Redmond’s inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since 2017.