Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21338 | Local Privilege Escalation in Microsoft Windows Kernel via Exposed IOCTL (CVE-2024-21338) | 7.8 | 60% | KEVRansomwarePoC ×3 | KEV |
| CVE-2024-38193 | Use-After-Free Privilege Escalation in Microsoft Windows WinSock Driver (afd.sys) | 7.8 | 29% | KEVPoC | KEV |
| CVE-2025-21198 | Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability | 9.0 | <1% | ||
CVE-2025-21376+1 related CVE | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 8.1 group max | 9% | ||
CVE-2025-21418+1 related CVE | Local Privilege Escalation via Heap Overflow in Windows WinSock AFD Driver | 7.8 group max | 2% | KEV | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Feb 12, 2025 Patch Tuesday / Vulnerability Microsoft on Tuesday released fixes for 63 security flaws impacting its software products, including two vulnerabilities that it said has come under active exploitation in the wild. Of the 63 vulnerabilities, three are rated Critical, 57 are rated Important, one is rated Moderate, and two are rated Low in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.