Monthly Fallout Report
January 2025 Fallout
159 vulnerabilities, 3 Hyper-V zero-days, and Kerberos throwing tantrums. Classic start to the year.
Tired of patch chaos? Automox automates patching across Windows, Mac, and Linux — so you're never caught off guard on Patch Tuesday.
Try Free →Fallout Timeline
Vault dwellers, January 2025 hits hard with 159 vulnerabilities — including 3 critical Hyper-V zero-days that could hand attackers elevated privileges on virtualized systems. Three additional CVEs have functional exploit code in the wild, so the clock is ticking. Windows 10 (KB5049981) and Windows 11 (KB5050009) updates are the priority. Patch now — especially if you run Hyper-V!
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege — actively exploited.
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege — actively exploited.
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege — actively exploited.
Sources: r/sysadmin · BleepingComputer · MSRC
Three days in and the wasteland is rumbling. BSOD crashes are gate-crashing the party — Kerberos and the Local Security Authority Process decided to throw tantrums, and the System Guard Runtime Monitor Broker Service (SgrmBroker.exe) apparently took a post-update nap. Microsoft Teams is vanishing from Windows 11 startups. Hyper-V Domain Controllers are rebooting due to authentication bugs. Classic January chaos.
- Windows 11 Microsoft Teams no longer starting automatically / disappearing altogether
- Server 2022 Virtual machine unable to find NIC post-update
- Server 2022 Kerberos ticket granting disrupts SSO authentication with SAP
- Server 2022 Hyper-V VM Domain Controllers rebooting due to Kerberos / LSA authentication bug
- Miscellaneous SgrmBroker.exe not running after update (no major disruption reported)
- Miscellaneous Calculator app disappearing or greyed out
- Miscellaneous Outlook signatures dropdown text appears blank/missing
- Miscellaneous .NET installation stalls / requires multiple reboots
Sources: r/sysadmin · WZorNET
Two weeks out, things have largely stabilized. Microsoft confirmed that SgrmBroker.exe has been effectively deprecated for years and poses no active security risk. A handful of lingering issues remain across specific configurations — check the items below if you're still seeing problems.
- Server 2022 Virtual machines with outdated VM tools causing high CPU consumption
- Server 2016 OneNote crashing when running Office version 2412
- Windows 10 802.11x authentication failures
- Miscellaneous USB audio devices not working after update
Sources: r/sysadmin
Resources