Microsoft Issues Mitigations for 1,246 Vulnerabilities in 2025

First seen 31 Dec 2025, 18:19 UTC • Csoonline

•0% similarity •19

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

In 2025, Microsoft addressed a total of 1,246 Common Vulnerabilities and Exposures (CVEs), with 158 classified as critical. Among these, 41 were zero-day vulnerabilities, and a significant portion, 38.3%, were related to elevation of privilege. This extensive patching effort highlights the ongoing security challenges faced by organizations relying on Microsoft products.

ThreatCluster AI How this analysis works

Attack Flow

21 entities, 55 inferred relationships (STIX 2.1).

Threat Actor (1)

Stealth Falcon

Technique (3)

Malware
Ransomware
Zero-day Exploit

Vulnerability (8)

CVE-2025-24983
CVE-2025-26633
CVE-2025-29824
CVE-2025-30377
CVE-2025-33053
CVE-2025-53770
Kerberos BadSuccessor
ToolShell

Malware (2)

Horus Agent
MSC EvilTwin

Affected Platform (6)

Active Directory
Microsoft Office
MMC
NTFS
SharePoint
Windows

Tool (1)

PipeMagic Backdoor

Relationships

Stealth Falcon uses Horus Agent
Stealth Falcon uses MSC EvilTwin
Stealth Falcon uses PipeMagic Backdoor
Stealth Falcon uses Malware
Stealth Falcon uses Ransomware
Stealth Falcon uses Zero-day Exploit
Horus Agent exploits CVE-2025-24983
Horus Agent exploits CVE-2025-26633
Horus Agent exploits CVE-2025-29824
Horus Agent exploits CVE-2025-30377
Horus Agent exploits CVE-2025-33053
MSC EvilTwin exploits CVE-2025-24983
MSC EvilTwin exploits CVE-2025-26633
MSC EvilTwin exploits CVE-2025-29824
MSC EvilTwin exploits CVE-2025-30377
MSC EvilTwin exploits CVE-2025-33053
PipeMagic Backdoor exploits CVE-2025-24983
PipeMagic Backdoor exploits CVE-2025-26633
PipeMagic Backdoor exploits CVE-2025-29824
PipeMagic Backdoor exploits CVE-2025-30377
PipeMagic Backdoor exploits CVE-2025-33053
CVE-2025-24983 targets Active Directory
CVE-2025-24983 targets Microsoft Office
CVE-2025-24983 targets MMC
CVE-2025-24983 targets NTFS
CVE-2025-26633 targets Active Directory
CVE-2025-26633 targets Microsoft Office
CVE-2025-26633 targets MMC
CVE-2025-26633 targets NTFS
CVE-2025-29824 targets Active Directory
CVE-2025-29824 targets Microsoft Office
CVE-2025-29824 targets MMC
CVE-2025-29824 targets NTFS
CVE-2025-30377 targets Active Directory
CVE-2025-30377 targets Microsoft Office
CVE-2025-30377 targets MMC
CVE-2025-30377 targets NTFS
CVE-2025-33053 targets Active Directory
CVE-2025-33053 targets Microsoft Office
CVE-2025-33053 targets MMC
CVE-2025-33053 targets NTFS
CVE-2025-53770 targets Active Directory
CVE-2025-53770 targets Microsoft Office
CVE-2025-53770 targets MMC
CVE-2025-53770 targets NTFS
Kerberos BadSuccessor targets Active Directory
Kerberos BadSuccessor targets Microsoft Office
Kerberos BadSuccessor targets MMC
Kerberos BadSuccessor targets NTFS
ToolShell targets Active Directory
ToolShell targets Microsoft Office
ToolShell targets MMC
ToolShell targets NTFS
Stealth Falcon related to SharePoint
Stealth Falcon related to Windows

Community

Browse all →

Tracked Entities in This Story

Stealth Falcon Horus Agent MSC EvilTwin Active Directory Microsoft Office MMC NTFS SharePoint Windows

Microsoft Issues Mitigations for 1,246 Vulnerabilities in 2025

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story