0patch
@0patch
Followers
8K
Following
526
Media
412
Statuses
4K
Microscopic cures for big security holes. 0patch (pronounced 'zero patch') Bluesky: https://t.co/js7yaM3lqN Mastodon: @[email protected]
in every running process
Joined March 2012
If your organization is using Office 2016 or 2019 and isn’t ready for Microsoft’s end of support this October, we have a quick, simple, and affordable solution. A single 0patch license will cover Windows patches, Office patches, 0day patches and "wontfix" patches. Don't wait!.
0
3
1
We'd like to thank Filip Dragović (@filip_dragovic). for sharing their finding and their POC, which allowed us to reproduce the issue and create patches for our users.
0
6
12
Micropatches Released for Windows Update Service Elevation of Privilege Vulnerability (CVE-2025-48799)
1
6
14
We'd like to thank @moiz_hehe for sharing their finding and their POC, which allowed us to reproduce the issue and create patches for our users.
0
4
3
Micropatches have already been distributed to, and applied on, all affected online computers with 0patch Agent in PRO or Enterprise accounts (unless Enterprise group settings prevented that). As always, no reboot was required.
1
3
1
Micropatches were written for the following fully updated security-adopted Windows versions:. Windows 11 v21H2.Windows 10 v21H2.Windows 10 v21H1.Windows 10 v20H2.Windows 10 v2004.Windows 10 v1909.Windows 10 v1809.Windows 10 v1803.
1
1
1
Micropatches Released for Windows Disk Cleanup Tool Elevation of Privilege Vulnerability (CVE-2025-21420)
1
6
8
Our researchers have confirmed this issue on freshly installed fully updated Windows Server 2025 domain controller, using a regular domain user as attacker. Instant domain controller BSOD by any domain user.
Welp. reported an issue to msrc, demonstrating that kerberos TGS request with a malformed PA-FOR-X509-USER struct will crash the LSASS on any win2025 domain controller. Got the default response :/.Dunno how I feel abt this, but this was the first and last time I'm doing this.
1
9
31
Micropatches Released for "WSPCoerce" Coerced Authentication via Windows Search Protocol (NO CVE/WONTFIX)
1
7
10
We'd like to thank Remco van der Meer ( with Warpnet ( for sharing their research on this vulnerability.
0
4
2
Micropatches Released for Windows Local Session Manager (LSM) Denial of Service Vulnerability (CVE-2025-26651)
1
5
8
We would like to thank security researchers Alexandra Gofman and David Driker with @_CPResearch_ for detecting the exploitation and publishing their analysis, which made it possible for us to create a micropatch for this issue.
0
4
1
It turned out that all our security-adopted Windows versions were affected by this issue, so we created micropatches for them all. These are already distributed and applied to all online affected systems.
1
2
1
This exploited-in-the-wild issue is an interesting twist on binary planting that we were working on a decade and a half ago. The DLL/EXE search order just keeps on giving (to attackers, that is).
1
3
1
Micropatches Released for WEBDAV Remote Code Execution Vulnerability (CVE-2025-33053)
1
7
8
We would like to thank security researcher Zhiniang Peng (@edwardzpeng) for publishing their analysis, which made it possible for us to create a micropatch for this issue.
0
3
5
CVE-2025-29957 is a denial of service vulnerability allowing an attacker in the network to easily consume all available memory on a Windows Server with Windows Deployment Service installed. Our patch properly frees memory allocated by incoming requests (just like Microsoft's).
1
1
3
Micropatches Released for Preauth DoS on Windows Deployment Service (CVE-2025-29957)
1
5
12