Windows 10: The Windows security updates for January 2025 are now available

Same procedure as every year. Microsoft released the first batch of security updates of 2025 a moment ago. Security updates are available for all supported client and server versions of Windows and also other company products, including Microsoft Office.

Our overview of the monthly security updates provides users and system administrators with information and actionable advice. It pulls information from various sources, including several official Microsoft websites and official release notes.

You find, among other things, a list of known issues, direct download links, the list of major changes, a security assessment, and more in the paragraphs that follow.

Microsoft Windows Security Updates: January 2025


You may download the following Excel spreadsheet to get a list of released updates. Click on the following link to download the archive to the local device: Windows Security Updates January 2025 Excel

Executive Summary

• Microsoft released a total of 159 security updates for various Microsoft products and 2 security update for non-Microsoft issues (e.g. Chromium).
• All clients affected by a Citrix software issue that may prevent the installation of the January 2025 security updates.
• Windows clients with issues are:
  • Windows 10 version 22H2
  • Windows 11 version 22H2, 23H2, and 24H2
• Windows Server clients with issues:
  • Windows Server 2008
  • Windows Server 2022
• Windows 11, version 22H2, Home and Pro, have reached end of support. Microsoft will force upgrade devices to newer Windows versions.

Product overview


Each supported version of Windows and their critical vulnerabilities are listed below.

• Windows 10 version 22H2: 120 vulnerabilities, 5 critical, 115 important
• • Microsoft Digest Authentication Remote Code Execution Vulnerability -- CVE-2025-21294
  • SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability -- CVE-2025-21295
  • BranchCache Remote Code Execution Vulnerability -- CVE-2025-21296
  • Windows OLE Remote Code Execution Vulnerability -- CVE-2025-21298
  • Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability -- CVE-2025-21307
• Windows 11 version 22H2 and 23H2: 120 vulnerabilities, 5 critical, 115 important
  • same as Windows 10 version 22H2
• Windows 11 version 24H2: 121 vulnerabilities, 9 critical, 46 important
  • Windows NTLM V1 Elevation of Privilege Vulnerability -- CVE-2025-21311
  • Plus all from Windows 10 version 22H2.

Windows Server products

• Windows Server 2008 R2 (extended support only): 78 vulnerabilities: 6 critical, 72 important
  • Microsoft Digest Authentication Remote Code Execution Vulnerability -- CVE-2025-21294
  • SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability -- CVE-2025-21295
  • BranchCache Remote Code Execution Vulnerability -- CVE-2025-21296
  • Windows Remote Desktop Services Remote Code Execution Vulnerability -- CVE-2025-21297
  • Windows OLE Remote Code Execution Vulnerability -- CVE-2025-21298
  • Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability -- CVE-2025-21307
• Windows Server 2012 R2 (extended support only): unknown
• Windows Server 2016: 110 vulnerabilities: 7 critical, 103 important
  • Windows Remote Desktop Services Remote Code Execution Vulnerability -- CVE-2025-21309
  • Plus every critical vulnerability of Windows Server 2008 R2
• Windows Server 2019: 117 vulnerabilities: 7 critical, 112 important
  • Same as Windows Server 2016
• Windows Server 2022: 121 vulnerabilities: 7 critical, 114 important
  • Same as Windows Server 2016
• Windows Server 2025: 125 vulnerabilities: 7 critical, 118 important
  • Windows NTLM V1 Elevation of Privilege Vulnerability -- CVE-2025-21311
  • Same as Windows Server 2016

Windows Security Updates


Windows 10 version 22H2

• Support Page: KB5049981

Updates and improvements:

• Security updates

Windows 11 version 23H2

• Support Page: KB5050021

Updates and improvements:

• Security updates

Windows 11 version 24H2

• Support page: KB5050009

Updates and improvements:

• Security updates

Windows Security updates

2025-01 Cumulative Security Update for Internet Explorer (KB5049994)

2025-01 Security Update for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5050411)

2025-01 Cumulative Update for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5049981)

2025-01 Cumulative Update for Windows 10 Version 1507 (KB5050013)

Server

2025-01 Security Monthly Quality Rollup for Windows Server 2012 (KB5050004)

2025-01 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5050006)

2025-01 Security Monthly Quality Rollup for Windows Server 2012 R2 (KB5050048)

2025-01 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB5050049)

2025-01 Security Only Quality Update for Windows Server 2008 (KB5050061)

2025-01 Security Monthly Quality Rollup for Windows Server 2008 (KB5050063)

2025-01 Security Only Update for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 for x64 (KB5050180)

2025-01 Security Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5050410)

2025-01 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5049983)

2025-01 Cumulative Update for Windows Server 2016 and Windows 10 Version 1607 (KB5049993)

2025-01 Cumulative Update for Windows Server 2019 and Windows 10 Version 1809 (KB5050008)

.NET

2025-01 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 for x64 (KB5049609)

2025-01 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 for x64 (KB5049610)

2025-01 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2008 R2 and Windows Server 2008 (KB5049611)

2025-01 Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 for x64 (KB5049616)

2025-01 Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 R2 for x64 (KB5049618)

2025-01 Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2008 R2 for x64 (KB5049619)

2025-01 Security Only Update for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2008 R2 and Windows Server 2008 (KB5049627)

2025-01 Security Only Update for .NET Framework 4.8 for Windows Server 2008 R2 for x64 (KB5049628)

2025-01 Security Only Update for .NET Framework 4.6.2 for Windows Server 2008 (KB5050181)

2025-01 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 for x64 (KB5050183)

2025-01 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 (KB5050184)

2025-01 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5050185)

2025-01 Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 (KB5050186)

2025-01 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows Server 2019 and Windows 10 Version 1809 (KB5049608)

2025-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5049613)

2025-01 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 and Windows 10 Version 1607 (KB5049614)

2025-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2019 and Windows 10 Version 1809 (KB5049615)

2025-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 (KB5049617)

2025-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2 for x64 (KB5049620)

2025-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5049621)

2025-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11 (KB5049624)

2025-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 22H2 for x64 (KB5049625)

2025-01 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 and Windows 10 Version 1809 (KB5050182)

2025-01 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 (KB5050187)

2025-01 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 (KB5050188)

2025-01 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system, version 22H2 for x64 (KB5050190)

2025-01 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 (KB5050416)

Servicing Stack

2025-01 Servicing Stack Update for Windows Server 2016 and Windows 10 Version 1607 (KB5050109)

2025-01 Servicing Stack Update for Windows 10 Version 1507 (KB5050112)

2025-01 Servicing Stack Update for Windows Server 2012 R2 for x64-based Systems (KB5050115)

2025-01 Servicing Stack Update for Windows Server 2012 for x64-based Systems (KB5050116)

2025-01 Servicing Stack Update for Windows Server 2008 R2 for x64-based Systems (KB5050681)

2025-01 Servicing Stack Update for Windows Server 2008 (KB5050682)

Non-Security updates

2025-01 Dynamic Update for Windows 10 Version 1607 (KB5050120)

2025-01 Dynamic Update for Windows 10 Version 1507 (KB5050121)

2025-01 Dynamic Update for Windows 10 Version 1809 (KB5050198)

2025-01 Dynamic Update for Windows 10 Version 21H2 (KB5050199)

2025-01 Dynamic Update for Microsoft server operating system for x64-based Systems (KB5050201)

2025-01 Update for Windows 11 Version 24H2 (KB5050575)

Known Issues


Windows 10 version 22H2

• (NEW) OpenSSH may fail to start, which prevents SSH connections.
  • Workaround: Microsoft suggests updating permissions to temporarily address the issue. Instructions found here.
• (NEW) Devices with Citrix components installed may not be able to install the January 2025 security updates.
  • Citrix has released a workaround that needs to be applied before installing the January 2025 security updates. Link here

Windows 11 version 22H2 and 23H2

• (OLD) OpenSSH may fail to start, which prevents SSH connections.
  • Workaround: Microsoft suggests updating permissions to temporarily address the issue. Instructions found here.
• (NEW) Devices with Citrix components installed may not be able to install the January 2025 security updates.
  • Citrix has released a workaround that needs to be applied before installing the January 2025 security updates. Link here

Windows 11 version 24H2

• (New) OpenSSH may fail to start, which prevents SSH connections.
  • Workaround: Microsoft suggests updating permissions to temporarily address the issue. Instructions found here.
• (NEW) Devices with Citrix components installed may not be able to install the January 2025 security updates.
  • Citrix has released a workaround that needs to be applied before installing the January 2025 security updates. Link here
• (OLD) Players on ARM devices may not be able to play Roblox via the Microsoft Store.
  • Workaround: download and play the title directly from the developer website.

Security advisories and updates

• ADV 990001 -- Latest Servicing Stack Updates

Microsoft Office Updates

You find Office update information here.

How to download and install the January 2025 security updates


Security updates are downloaded and installed automatically by default on unmanaged Windows devices. While it is possible to change that behavior, on most systems, security updates do get installed automatically.

You can speed up the installation though, as it does not happen in real-time. This can be done through the Settings app or by downloading the update file from a Microsoft server to install it manually.

Here is how you check for updates in the Settings app:

1. Open the Start menu, type Windows Update, and select the result.
2. Activate the "check for updates" button. This runs a manual check for updates.
3. Activate the "download & install all" button, if the update is not downloaded automatically.

Updates are also published on the Microsoft Catalog website. You find them linked below.

Direct update downloads


Below are resource pages with direct download links, if you prefer to download the updates to install them manually.

Windows 10 version 22H2

• KB5049981 -- 2025-01 Cumulative Update for Windows 10 Version 21H2

Windows 11 version 22H2

• 
  KB5050021 -- 2025-01 Cumulative Update for Windows 11 version 22H2
  

Windows 11 version 23H2

• KB5050021 -- 2025-01 Cumulative Update for Windows 11 version 23H2

Windows 11 version 24H2

• KB5050009 -- 2025-01 Cumulative Update for Windows 11 version 24H2

Additional resources

• January 2025 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 11 24H2 Update History
• Windows 11 23H2 Update History
• Windows 10 Update History

Thank you for being a Ghacks reader. The post The Windows security updates for January 2025 are now available appeared first on gHacks Technology News.

read more...

 

January 2018 Office Update Release

See:

• January 2018 Office Update Release – Office Updates
• KB4058103 - January 2018 updates for Microsoft Office
  

 

Microsoft January 2019 Security Updates

Release Notes
January 2019 Security Updates

Release Date: January 08, 2019

The January security release consists of security updates for the following software:

• Adobe Flash Player
• Internet Explorer
• Microsoft Edge
• Microsoft Windows
• Microsoft Office and Microsoft Office Services and Web Apps
• ChakraCore
• .NET Framework
• ASP.NET
• Microsoft Exchange Server
• Microsoft Visual Studio

Please note the following information regarding the security updates:

• A list of the latest servicing stack updates for each operating system can be found in
  
  ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the
  
  Microsoft Update Catalog.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via
  
  Windows Update.
• For information on lifecycle and support dates for Windows 10 operating systems, please see
  
  Windows Lifecycle Facts Sheet.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.

• ADV190001
• CVE-2019-0536
• CVE-2019-0537
• CVE-2019-0545
• CVE-2019-0549
• CVE-2019-0553
• CVE-2019-0554
• CVE-2019-0559
• CVE-2019-0560
• CVE-2019-0561
• CVE-2019-0569
• CVE-2019-0585
• CVE-2019-0588

Known Issues

• 4480961
• 4480973
• 4480978
• 4480966
• 4480970
• 4480116
• 4480962
• 4480963
• 4480975
• 4468742
• 4471389

https://portal.msrc.microsoft.com/e...tedetail/b4384b95-e6d2-e811-a983-000d3a33c573

 

Microsoft January 2020 Security Updates

Release Notes

January 2020 Security Updates

Release Date: January 14, 2020

The January security release consists of security updates for the following software:

• Microsoft Windows
• Internet Explorer
• Microsoft Office and Microsoft Office Services and Web Apps
• ASP.NET Core
• .NET Core
• .NET Framework
• OneDrive for Android
• Microsoft Dynamics

Please note the following information regarding the security updates:

• For information regarding enabling Windows 10, version 1909 features, please see
  
  Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 10 operating systems, please see
  
  Windows Lifecycle Facts Sheet.
• A list of the latest servicing stack updates for each operating system can be found in
  
  ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Starting in May 2019, Internet Explorer 11 is available on Windows Server 2012. This configuration is present only in the IE Cumulative package.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via
  
  Windows Update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Note: Support for Windows 7, Windows Server 2008 R2, and Windows Server 2008 ends January 14, 2020. For more information please see
  
  Lifecycle FAQ-Extended Security Updates.

The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.

• CVE-2020-0601 *
• CVE-2020-0607
• CVE-2020-0608
• CVE-2020-0615
• CVE-2020-0622
• CVE-2020-0637
• CVE-2020-0639
• CVE-2020-0643
• CVE-2020-0647
• CVE-2020-0650
• CVE-2020-0651
• CVE-2020-0652
• CVE-2020-0653
• CVE-2020-0654 *

Known Issues

The f****ssues with the security updates. For a complete list of security update KBs, please see

2****ssues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).

[table][tr][td]4534271[/td][td]Windows 10, version 1607, Windows Server 2016[/td][/tr][tr][td]4534273[/td][td]Windows 1****809[/td][/tr][tr][td]4534276[/td][td]Windows 10, version 1709[/td][/tr][tr][td]4534283[/td][td]Windows Server 2012 (Monthly Rollup)[/td][/tr][tr][td]4534288[/td][td]Windows Server 2012 (Security-only update)[/td][/tr][tr][td]4534293[/td][td]Windows 10, version 1803, Windows Server version 1803[/td][/tr][tr][td]4534297[/td][td]Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)[/td][/tr][tr][td]4534306[/td][td]Windows 10[/td][/tr][tr][td]4534309[/td][td]Windows 8.1, Windows Server 2012 R2 (Security-only update[/td][/tr][/table]