Microsoft Patch Tuesday, February 2025 Edition

Summary: Microsoft's February 2025 Patch Tuesday fixed at least 56 vulnerabilities in Windows and supported software, including two zero-days being actively exploited: CVE-2025-21418, a buffer overflow with low attack complexity and no user interaction requirement, and CVE-2025-21391, a Windows Storage elevation of privilege flaw that could delete files. A third flaw, CVE-2025-21377, was publicly disclosed earlier and can be used to steal NTLMv2 hashes with minimal user interaction.
What you should know: Tenable's Satnam Narang noted this same Windows component has produced nine elevation of privilege vulnerabilities since 2022, and the 2024 one, CVE-2024-38193, was exploited by North Korea's Lazarus Group to implant a new version of the FudModule rootkit for persistence and stealth - and it is unclear whether CVE-2025-21418 was also used by Lazarus.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-38193 CVE-2025-21377 CVE-2025-21391 CVE-2025-21418 CVE-2025-24200
Related: Microsoft Patch Tuesday for February 2025 — Snort rules and prominent vulnerabilities Cyber Risks ·
Microsoft and Adobe Patch Tuesday, February 2025 Security Update Review | Qualys Cyber Risks ·
CVE-2025-24200: Apple iOS and iPadOS Incorrect Authorization Vulnerability Known Exploited Vulnerabilities · Feb 12, 2025