Security Updates
The latest Security Updates coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-21360: Critical Elevation of Privilege Vulnerability in Microsoft AutoUpdate
A newly discovered security vulnerability (CVE-2025-21360) in Microsoft AutoUpdate poses a serious threat to Windows and macOS systems, allowing attackers to gain elevated privileges through a flawed...
Windows VBS Flaw CVE-2025-21340: Patch Now for Privilege Escalation Risk
Microsoft has recently disclosed a critical security vulnerability (CVE-2025-21340) affecting Virtualization-Based Security (VBS) in Windows, raising concerns among enterprise and individual users...
CVE-2025-21364: Critical Excel Vulnerability Threatens Data Security - What You Need to Know
Microsoft Excel users face a new security threat with the discovery of CVE-2025-21364, a critical vulnerability that could allow attackers to execute malicious code through specially crafted...
CVE-2025-21357: Critical Remote Code Execution Vulnerability Discovered in Microsoft Outlook
CVE-2025-21357: Critical RCE Vulnerability in Microsoft Outlook Microsoft has disclosed a critical security vulnerability (CVE-2025-21357) affecting all supported versions of Microsoft Outlook that...
KB5050009 and KB5050021 patch zero-day exploits but break USB audio and webcams
Overview of January 2025 Patch Tuesday Updates for Windows 11 Microsoft's January 2025 Patch Tuesday has delivered two crucial cumulative updates for Windows 11 users: KB5050009 for version 24H2 and...
KB5050009 Patches 64 Flaws, Boosts Gaming and Memory on Windows 11
Microsoft has rolled out the KB5050009 update for Windows 11 as part of its November 2023 Patch Tuesday, delivering significant performance improvements and critical security fixes. This mandatory...
Patch Critical AD FS Flaw CVE-2025-21293 Now to Block Domain Takeover
A newly discovered critical vulnerability in Microsoft Active Directory (CVE-2025-21293) has sent shockwaves through the IT security community, with experts warning of potential widespread...
CVE-2025-21270 zero-day crashes all Windows Server MSMQ with single network packet.
CVE-2025-21270: Major DoS Vulnerability in Microsoft Message Queuing System Microsoft has disclosed a critical vulnerability (CVE-2025-21270) in its Message Queuing (MSMQ) system that could allow...
January 2025 Patch Tuesday: Crucial Security Fixes and KB5049981 Update for Windows 10
Overview of January 2025 Patch Tuesday for Windows 10 Microsoft's Patch Tuesday for January 2025 marks a significant moment as it delivers the first major security update of the year for Windows 10...
KB5050021 patches 3 critical RCE flaws, upgrades File Explorer and Task Manager.
Microsoft's latest Patch Tuesday update, KB5050021, brings significant improvements to Windows 11, enhancing both security and user experience. This cumulative update addresses multiple...
Linphone-Desktop DoS flaw lets attackers crash VoIP app with malformed SIP messages
A newly discovered critical vulnerability, CVE-2025-0430, has been identified in Linphone-Desktop, the popular open-source VoIP and SIP client. This flaw exposes users to denial-of-service (DoS)...