Microsoft fixes 63 vulnerabilities, including 2 zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-21358+1 related CVE | Windows Core Messaging Elevation of Privileges Vulnerability | 7.8 group max | <1% | ||
| CVE-2025-21198 | Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability | 9.0 | <1% | ||
CVE-2025-21418+1 related CVE | Local Privilege Escalation via Heap Overflow in Windows WinSock AFD Driver | 7.8 group max | 2% | KEV | KEV |
| CVE-2025-21400 | Improper Authorization Leads to Remote Code Execution in Microsoft SharePoint Server | 8.0 | 34% |
From the original article
4 min read at cyberscoop.com
The company’s monthly Patch Tuesday update comes with more than two-thirds of the patches closing high-severity flaws. The Microsoft logo is visible through a grid of its French headquarters on Jan. 25, 2023 in Issy-les-Moulineaux.
By @gregotto · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.