Scheduled updates for Microsoft products, including security updates for 63 vulnerabilities, of which two are reported as exploited
Summary
Scheduled updates for Microsoft products, including security updates for 63 vulnerabilities, of which two are reported as exploited
Affected platforms
The following platforms are known to be affected:
The following platforms are also known to be affected:
Threat details
Introduction
Microsoft has released security updates to address 63 vulnerabilities in Microsoft products. Six vulnerabilities are outlined below, of which two are exploited and four are considered critical.
Vulnerability details
CVE-2025-21418 is a 'heap-based buffer overflow' vulnerability in Windows and Windows Server with a CVSSv3 score of 7.8. Successful exploitation could allow an attacker to escalate privileges and gain SYSTEM privileges. Microsoft reports that this vulnerability is under exploitation.
CVE-2025-21391 is a 'link following' vulnerability in Windows and Windows Server with a CVSSv3 score of 7.1. Successful exploitation could allow an attacker to escalate privileges and gain the ability to delete targeted files on a system. Microsoft reports that this vulnerability is under exploitation.
CVE-2025-21177 is a critical 'server-side request forgery’ vulnerability in Microsoft Dynamics 365 Sales with a CVSSv3 score of 8.7. Successful exploitation could allow a remote unauthenticated attacker to escalate privileges. Microsoft reports that this vulnerability has already been fully mitigated and no action from users is required.
CVE-2025-21381 is a critical ’untrusted pointer dereference' vulnerability in Microsoft Excel, Microsoft Office, Microsoft 365 Apps, and Office Online Server with a CVSSv3 score of 7.8. The Preview Pane is considered an attack vector. Successful exploitation could allow an attacker to execute arbitrary code.
CVE-2025-21379 is a critical ‘use after free’ vulnerability in Windows 11 and Windows Server 2025 with a CVSSv3 score of 7.1. Successful exploitation could allow an attacker to perform a machine-in-the-middle attack, leading to remote code execution.
CVE-2025-21376 is a critical vulnerability in Windows and Windows Server Lightweight Directory Access Protocol with a CVSSv3 score of 8.1. Successful exploitation could result in a buffer overflow, which a unauthenticated attacker could leverage to achieve remote code execution.
Remediation advice
Affected organisations are encouraged to review Microsoft's February 2025 Security Updates and apply the relevant updates as soon as practicable.
Definitive source of threat updates
CVE Vulnerabilities
Last edited: 12 February 2025 12:04 pm