Microsoft Releases February 2025 Security Updates

Microsoft Releases February 2025 Security Updates ↗ source

February 12, 2025 JPCERT/CC Alert

Source: https://www.jpcert.or.jp/english/at/2025/at250004.html

Summary

Remote attackers leveraging these vulnerabilities may be able to execute arbitrary code. February 2025 Security Updates According to Microsoft, among the vulnerabilities, the following vulnerabilities have been confirmed to be exploited in the wild. Please consider applying the security update programs by referring to the information provided by Microsoft. Windows Storage Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Please apply the security update programs through Microsoft Update, Windows Update, etc. If you have any information regarding this alert, please contact JPCERT/CC.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVE	CVSS	Affected
CVE-2025-21418	7.8 High	Microsoft Windows Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, ena…
CVE-2025-21391	7.1 High	Microsoft Windows Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attack…

Extracted from the publication text. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Microsoft 388 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.