Microsoft’s May 2025 Patch Tuesday rolls out fixes for 83 vulnerabilities, featuring five actively exploited zero-days. This month’s spotlight includes privilege escalation flaws in Windows DWM, CLFS, and AFD drivers, several granting SYSTEM-level access, along with a Visual Studio RCE and a browser-targeted scripting engine bug. With attackers already leveraging these flaws in the wild, prompt patching is strongly recommended.
What’s new on HivePro
Get through updates and upcoming events, and more directly in your inbox