Microsoft's January 2025 security update expanded the list of vulnerable drivers, critical for countering Bring Your Own Vulnerable Driver attacks that exploit kernel drivers, thereby enhancing system security.
The January 2025 security update addressed 159 vulnerabilities, including significant issues in Windows Hyper-V NT Kernel, which could allow attackers to gain SYSTEM privileges.
Notably, vulnerabilities in Object Linking and Embedding and the NTLMv1 protocol scored 9.8 on the CVSS severity scale, indicating serious risks that have not been exploited publicly.
Caution is recommended when applying security patches, as early versions may be unreliable. Testing in controlled environments is essential before full deployment.
Collection
[
|
...
]