Microsoft patches three worrying security flaws in its latest critical update, so update now

• Microsoft released January 2025 Patch Tuesday cumulative update
• It fixes more than 150 vulnerabilities, including three being actively abused in the wild
• Other details about the flaws are not being disclosed at this time

The first Microsoft Patch Tuesday of 2025 is upon us, and it’s a big one, as the update patches 161 vulnerabilities found in various products, including three zero-day bugs that have been actively abused in the wild.

The three vulnerabilities are tracked as CVE-2025-21333, CVE-2025-21334, and CVE-2025-21335. All three have a severity score of 7.8 (high), and all are found in Windows Hyper-V NT Kernel Integration VSP.

"An attacker who successfully exploited this vulnerability could gain SYSTEM privileges," Microsoft said in the advisory for the flaws.

Added to CISA's KEV

Other details are not known right now, as Microsoft gives users enough time to apply the patch ...