Microsoft Fixes Another Two Actively Exploited Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-21194 | Microsoft Surface Security Feature Bypass Vulnerability | 7.1 | <1% | ||
| CVE-2025-21377 | NTLM Hash Disclosure Spoofing Vulnerability in Windows and Windows Server | 6.5 | 24% | ||
CVE-2025-21418+1 related CVE | Local Privilege Escalation via Heap Overflow in Windows WinSock AFD Driver | 7.8 group max | 2% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
Microsoft has been forced to issue security updates for four more zero-day vulnerabilities, including two currently under active exploitation. The tech giant’s February Patch Tuesday update round features fixes for over 50 CVEs, including 22 remote code execution (RCE) bugs, 19 elevation of privilege (EoP) flaws and two security feature bypass vulnerabilities.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.