FlagThis

Microsoft has released its February 2025 security update, addressing a total of 63 newly disclosed vulnerabilities. This update, released on February 11th, includes patches for various Microsoft products. Arctic Wolf has highlighted three vulnerabilities in this security bulletin that affect Microsoft Windows and are classified as critical or have been exploited in the wild.

Among the vulnerabilities addressed, two are actively being exploited, including CVE-2025-21418, a Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability, and CVE-2025-21391, a Windows Storage Elevation of Privilege Vulnerability. Users are strongly advised to apply these updates promptly to mitigate the risk posed by these threats. This month, Microsoft has released patches addressing a total of 141 vulnerabilities.

ImgSrc: arcticwolf.com

References :

• Arctic Wolf: Microsoft Patch Tuesday: February 2025
• isc.sans.edu: Microsoft February 2025 Patch Tuesday, (Tue, Feb 11th)
• Tenable Blog: Microsoft’s February 2025 Patch Tuesday Addresses 55 CVEs (CVE-2025-21418, CVE-2025-21391)

Classification:

• HashTags: #Microsoft #PatchTuesday #Vulnerability
• Company: Microsoft
• Target: Microsoft users
• Product: Microsoft Windows
• Feature: Multiple vulnerabilities
• Type: ProductUpdate
• Severity: Medium