The January 2025 security update for Windows 11, version 24H2 expands the list of vulnerable drivers that could be used in Bring Your Own Vulnerable Driver attacks. BYOVD Vulnerabilities in kernel drivers could allow threat actors to sneak malware into the kernel.

Yesterday was January’s big Patch Tuesday, where Microsoft rolled out a big bundle of security updates across several apps and services, eliminating 159 security vulnerabilities. This is the most extensive Patch Tuesday of the last few years with more than double the usual number of fixed security flaws.

These include patches for three actively exploited zero-days. In total, this Patch Tuesday fixes: 58 Remote Code Execution vulnerabilities, 40 Elevation of Privilege vulnerabilities, 24 Information Disclosure vulnerabilities, 20 Denial of Service vulnerabilities, 14 Security Feature Bypass vulnerabilities, and 5 Spoofing vulnerabilities.

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three “zero-day” weaknesses that are already under active attack. Redmond’s inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since 2017.

Patch Tuesday fixes BYOVD attack with Windows Kernel Vulnerable Driver Blocklist file. Windows 11 24H2 update causes issues with Roblox on Arm devices, requiring a launcher from the official website.

Microsoft released the first Patch Tuesday security updates for Windows addressing 159 CVEs with 8 zero-day threats discovered.

Microsoft has focused its January 2025 patch tuesday cycle on fixing critical Hyper-V and OLE flaws, securing virtualized environments and enterprise workflows.

Microsoft has rushed out fixes for a trio of already-exploited zero-day vulnerabilities in the Windows Hyper-V platform.