Microsoft Patch Tuesday — February 2025

Tuesday, 11 February 2025

Vulnerabilities: 55
Critical: 1
High: 42
Zero-days: 2
Public exploit: 1

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2025-21418 Zero-day Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 2.1%
High 7.1
CVE-2025-21391 Zero-day Windows Storage Elevation of Privilege Vulnerability
EPSS 2.3%

Critical 1

Critical 9.0
CVE-2025-21198 Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2025-21420 Public exploit Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
EPSS 3.7%

All vulnerabilities 55

Critical1 Show

Critical 9.0
CVE-2025-21198 Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

High42 Show

High 7.8
CVE-2025-21418 Zero-day Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 2.1%
High 7.1
CVE-2025-21391 Zero-day Windows Storage Elevation of Privilege Vulnerability
EPSS 2.3%
High 8.8
CVE-2025-21190 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2025-21200 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2025-21201 Windows Telephony Server Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2025-21208 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2025-21368 Microsoft Digest Authentication Remote Code Execution Vulnerability
EPSS 2.2%
High 8.8
CVE-2025-21369 Microsoft Digest Authentication Remote Code Execution Vulnerability
EPSS 2.2%
High 8.8
CVE-2025-21371 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2025-21406 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2025-21407 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2025-21410 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.1
CVE-2025-21376 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 9.3%
High 8.0
CVE-2025-21400 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 34%
High 7.8
CVE-2025-21420 Public exploit Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
EPSS 3.7%
High 7.8
CVE-2025-21322 Microsoft PC Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21358 Windows Core Messaging Elevation of Privileges Vulnerability
High 7.8
CVE-2025-21359 Windows Kernel Security Feature Bypass Vulnerability
High 7.8
CVE-2025-21367 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21373 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21375 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-21381 Microsoft Excel Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-21383 Microsoft Excel Information Disclosure Vulnerability
EPSS 1%
High 7.8
CVE-2025-21386 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-21387 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-21390 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-21392 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-21394 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-21397 Microsoft Office Remote Code Execution Vulnerability
High 7.5
CVE-2025-21181 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 3.5%
High 7.5
CVE-2025-21351 Windows Active Directory Domain Services API Denial of Service Vulnerability
EPSS 2.5%
High 7.4
CVE-2025-21182 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
High 7.4
CVE-2025-21183 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
High 7.3
CVE-2025-21206 Visual Studio Installer Elevation of Privilege Vulnerability
High 7.3
CVE-2025-24039 Visual Studio Code Elevation of Privilege Vulnerability
High 7.3
CVE-2025-24042 Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability
High 7.1
CVE-2025-21194 Microsoft Surface Security Feature Bypass Vulnerability
High 7.1
CVE-2025-21379 DHCP Client Service Remote Code Execution Vulnerability
High 7.1
CVE-2025-21419 Windows Setup Files Cleanup Elevation of Privilege Vulnerability
High 7.0
CVE-2025-21184 Windows Core Messaging Elevation of Privileges Vulnerability
High 7.0
CVE-2025-21414 Windows Core Messaging Elevation of Privileges Vulnerability
High 7.0
CVE-2025-24036 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Medium11 Show

Medium 6.8
CVE-2025-21349 Windows Remote Desktop Configuration Service Tampering Vulnerability
EPSS 1.1%
Medium 6.5
CVE-2025-21212 Internet Connection Sharing (ICS) Denial of Service Vulnerability
EPSS 1%
Medium 6.5
CVE-2025-21216 Internet Connection Sharing (ICS) Denial of Service Vulnerability
EPSS 1%
Medium 6.5
CVE-2025-21254 Internet Connection Sharing (ICS) Denial of Service Vulnerability
EPSS 1%
Medium 6.5
CVE-2025-21352 Internet Connection Sharing (ICS) Denial of Service Vulnerability
EPSS 1%
Medium 6.5
CVE-2025-21377 NTLM Hash Disclosure Spoofing Vulnerability
EPSS 40%
Medium 6.0
CVE-2025-21188 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
Medium 6.0
CVE-2025-21347 Windows Deployment Services Denial of Service Vulnerability
Medium 5.9
CVE-2025-21350 Windows Kerberos Denial of Service Vulnerability
EPSS 2.1%
Medium 5.3
CVE-2025-21259 Microsoft Outlook Spoofing Vulnerability
EPSS 1.2%
Medium 4.8
CVE-2025-21179 DHCP Client Service Denial of Service Vulnerability

Low1 Show

Low 3.3
CVE-2025-21337 Windows NTFS Elevation of Privilege Vulnerability