Microsoft and Adobe Patch Tuesday, February 2025 Security Update Review | Qualys
Summary: Microsoft's February 2025 Patch Tuesday addressed 67 vulnerabilities, including three critical and 53 important severity flaws, plus four zero-day vulnerabilities of which two were actively exploited and two were publicly disclosed. Adobe released seven advisories covering 45 vulnerabilities across products including InDesign, Commerce, Illustrator, and Photoshop Elements, 23 of them rated critical. CISA added CVE-2025-21391 (Windows Storage) and CVE-2025-21418 (Windows Ancillary Function Driver for WinSock) to its Known Exploited Vulnerabilities Catalog with a March 4, 2025 patch deadline.
What's compelling: Two of this month's flaws are already being exploited in the wild, and CISA has set a March 4 deadline for federal agencies to patch CVE-2025-21391 and CVE-2025-21418 - one of which can hand an attacker SYSTEM privileges on a core Windows network driver.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-21391CVE-2025-21418
- Related
- Microsoft Patch Tuesday, February 2025 Edition Cyber Risks ·CVE-2025-21391: Microsoft Windows Storage Link Following Vulnerability Known Exploited Vulnerabilities · Feb 11, 2025