Microsoft kicked off its first Patch Tuesday of 2025 by addressing the largest number of CVEs in a single month since 2017. In addition to several vulnerabilities addressed in its Edge browser back in December 2024, this week the company has patched a total of 161 security vulnerabilities across its entire software portfolio.
These include patches for three actively exploited zero-days. In total, this Patch Tuesday fixes: 58 Remote Code Execution vulnerabilities, 40 Elevation of Privilege vulnerabilities, 24 Information Disclosure vulnerabilities, 20 Denial of Service vulnerabilities, 14 Security Feature Bypass vulnerabilities, and 5 Spoofing vulnerabilities.
