Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities

Summary: Microsoft's February 2025 security update covers 63 vulnerabilities, including 4 rated critical and one rated moderate. Two critical flaws stand out: CVE-2025-21376, an unauthenticated out-of-bounds write in Windows LDAP caused by a race condition that could allow code execution in lsass.exe (CVSS 8.1, "more likely to be exploited"), and CVE-2025-21379, a DHCP Client Service RCE requiring an attacker in the network path (CVSS 7.1).
What you should know: CVE-2025-21391 and CVE-2025-21418 are the only two flaws this month known to be exploited in the wild, and CVE-2025-21418 in the Ancillary Function Driver lets an attacker who exploits it gain SYSTEM privileges.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-21177 CVE-2025-21368 CVE-2025-21369 CVE-2025-21376 CVE-2025-21379 CVE-2025-21381 CVE-2025-21391 CVE-2025-21400 CVE-2025-21418
Related: Microsoft Patch Tuesday, February 2025 Edition Cyber Risks ·
Microsoft and Adobe Patch Tuesday, February 2025 Security Update Review | Qualys Cyber Risks ·
CVE-2025-21391: Microsoft Windows Storage Link Following Vulnerability Known Exploited Vulnerabilities · Feb 11, 2025