Microsoft Patch Tuesday February 2025: Fixes 55 vulnerabilities

Microsoft released the February 2025 Patch Tuesday yesterday , which fixes 55 vulnerabilities, including four zero-days .

In the list below, you can see the categories of bugs that are being fixed this month:

• 22 vulnerabilities that allow remote code execution
• 19 vulnerabilities that allow elevation of privilege
• 9 vulnerabilities that allow Denial of Service attacks
• 3 vulnerabilities that allow spoofing
• 2 vulnerabilities that allow bypassing security features
• 1 vulnerability that allows information disclosure

The above numbers do not include a critical Microsoft Dynamics 365 Sales elevation of privilege vulnerability and 10 Microsoft Edge vulnerabilities that were fixed on February 6.

See also: Orthanc server vulnerability compromises medical data

Microsoft Patch Tuesday February 2025: Zero-day vulnerabilities

This month's Patch Tuesday fixes four zero-day vulnerabilities. Two of them have been used in attacks. Microsoft classifies a bug as a zero-day when it is publicly disclosed or used in attacks, and no official patch is available.

The two vulnerabilities used in attacks and fixed with Microsoft's February Patch Tuesday are:

CVE-2025-21391: Elevation of Privilege Vulnerability in Windows Storage

Microsoft has patched an actively used vulnerability that could be used to delete.

“An attacker could only delete targeted files on a system,” the company says. “This vulnerability does not allow the disclosure of any confidential information, but could allow an attacker to delete data that could result in service unavailability,” Microsoft continued.

CVE-2025-21418 – Windows Ancillary Function Driver for WinSock: Elevation of Privilege Vulnerability

The second vulnerability exploited by hackers allows for privileges SYSTEM in Windows.

It is unknown how it was used in attacks, and Microsoft says this flaw was disclosed anonymously.

Microsoft Patch Tuesday February: Zero-days publicly disclosed

CVE-2025-21194 – Microsoft Surface Security Bypass Vulnerability

Microsoft says this is a hypervisor that allows attacks to bypass UEFI and undermine the secure kernel.

Microsoft says Francisco Falcón and Iván Arce of Quarkslab discovered the vulnerability.

See also: Apple fixes second zero-day vulnerability this year!

CVE-2025-21377 – NTLM Hash: Forgery Vulnerability

Microsoft has fixed a vulnerability that exposes a Windows user's NTLM hashes , potentially allowing a remote attacker to log in as the user

"A user's minimal interaction with a malicious file, such as selecting (single-click), inspecting (right-click), or performing an action other than opening or executing the file, could trigger this vulnerability," Microsoft explains.

Microsoft says this flaw was discovered by multiple researchers (Owen Cheung, Ivan Sheung, Vincent Yau, Yorick Koster, Blaz Satler).

See also: Zimbra fixes critical vulnerabilities!

Microsoft Patch Tuesday February 2025: All vulnerabilities

In the table below, you can see all the vulnerabilities being fixed this month:

Microsoft Patch Tuesday February 2025

Microsoft Patch Tuesday is a practice followed by Microsoft, where on the second Tuesday of each month it releases updates and fixes for its operating systems, programs, and applications. These updates typically include security, performance improvements, and new features.

The purpose of Microsoft Patch Tuesday is to provide Microsoft users with the best possible user experience by fixing issues and ensuring the security of their systems. Security updates help protect systems from security vulnerabilities and malware. These updates fix known security issues and strengthen the resilience of systems against attacks.

Source: www.bleepingcomputer.com