cve.bz

Microsoft Patch Tuesday, February 2025: the CVEs

Filter

Microsoft Patch Tuesday February 2025: the CVEs Microsoft published on 11 February 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.3CVE-2025-24042EPSS 0.7%

    Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability

  2. 7.3CVE-2025-24039EPSS 0.7%

    Visual Studio Code Elevation of Privilege Vulnerability

  3. 7.0CVE-2025-24036EPSS 0.4%

    Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

  4. 7.8CVE-2025-21420EPSS 3.7%

    Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

  5. 7.1CVE-2025-21419EPSS 0.7%

    Windows Setup Files Cleanup Elevation of Privilege Vulnerability

  6. 7.8CVE-2025-21418KEVEPSS 2.1%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  7. 7.0CVE-2025-21414EPSS 0.6%

    Windows Core Messaging Elevation of Privileges Vulnerability

  8. 8.8CVE-2025-21410EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  9. 8.8CVE-2025-21407EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  10. 8.8CVE-2025-21406EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  11. 8.0CVE-2025-21400EPSS 34%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  12. 7.8CVE-2025-21397EPSS 0.8%

    Microsoft Office Remote Code Execution Vulnerability

  13. 7.8CVE-2025-21394EPSS 0.8%

    Microsoft Excel Remote Code Execution Vulnerability

  14. 7.8CVE-2025-21392EPSS 0.8%

    Microsoft Office Remote Code Execution Vulnerability

  15. 7.1CVE-2025-21391KEVEPSS 2.3%

    Windows Storage Elevation of Privilege Vulnerability

  16. 7.8CVE-2025-21390EPSS 0.8%

    Microsoft Excel Remote Code Execution Vulnerability

  17. 7.8CVE-2025-21387EPSS 0.9%

    Microsoft Excel Remote Code Execution Vulnerability

  18. 7.8CVE-2025-21386EPSS 0.8%

    Microsoft Excel Remote Code Execution Vulnerability

  19. 5.5CVE-2025-21383EPSS 1.0%

    Microsoft Excel Information Disclosure Vulnerability

  20. 7.8CVE-2025-21381EPSS 1.1%

    Microsoft Excel Remote Code Execution Vulnerability

  21. 7.1CVE-2025-21379EPSS 0.9%

    DHCP Client Service Remote Code Execution Vulnerability

  22. 6.5CVE-2025-21377EPSS 40%

    NTLM Hash Disclosure Spoofing Vulnerability

  23. 8.1CVE-2025-21376EPSS 9.3%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  24. 7.8CVE-2025-21375EPSS 0.6%

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

  25. 7.8CVE-2025-21373EPSS 0.8%

    Windows Installer Elevation of Privilege Vulnerability

  26. 8.8CVE-2025-21371EPSS 2.4%

    Windows Telephony Service Remote Code Execution Vulnerability

  27. 8.8CVE-2025-21369EPSS 2.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  28. 8.8CVE-2025-21368EPSS 2.2%

    Microsoft Digest Authentication Remote Code Execution Vulnerability

  29. 7.8CVE-2025-21367EPSS 0.6%

    Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

  30. 7.8CVE-2025-21359EPSS 0.6%

    Windows Kernel Security Feature Bypass Vulnerability

  31. 7.8CVE-2025-21358EPSS 0.8%

    Windows Core Messaging Elevation of Privileges Vulnerability

  32. 6.5CVE-2025-21352EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  33. 7.5CVE-2025-21351EPSS 2.5%

    Windows Active Directory Domain Services API Denial of Service Vulnerability

  34. 5.9CVE-2025-21350EPSS 2.1%

    Windows Kerberos Denial of Service Vulnerability

  35. 6.8CVE-2025-21349EPSS 1.1%

    Windows Remote Desktop Configuration Service Tampering Vulnerability

  36. 6.0CVE-2025-21347EPSS 0.7%

    Windows Deployment Services Denial of Service Vulnerability

  37. 3.3CVE-2025-21337EPSS 0.6%

    Windows NTFS Elevation of Privilege Vulnerability

  38. 7.8CVE-2025-21322EPSS 0.7%

    Microsoft PC Manager Elevation of Privilege Vulnerability

  39. 5.3CVE-2025-21259EPSS 1.2%

    Microsoft Outlook Spoofing Vulnerability

  40. 6.5CVE-2025-21254EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  41. 6.5CVE-2025-21216EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  42. 6.5CVE-2025-21212EPSS 1.0%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  43. 8.8CVE-2025-21208EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  44. 7.3CVE-2025-21206EPSS 0.7%

    Visual Studio Installer Elevation of Privilege Vulnerability

  45. 8.8CVE-2025-21201EPSS 1.8%

    Windows Telephony Server Remote Code Execution Vulnerability

  46. 8.8CVE-2025-21200EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  47. 9.0CVE-2025-21198EPSS 0.9%

    Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

  48. 7.1CVE-2025-21194EPSS 0.8%

    Microsoft Surface Security Feature Bypass Vulnerability

  49. 8.8CVE-2025-21190EPSS 1.8%

    Windows Telephony Service Remote Code Execution Vulnerability

  50. 6.0CVE-2025-21188EPSS 0.7%

    Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

  51. 7.0CVE-2025-21184EPSS 0.6%

    Windows Core Messaging Elevation of Privileges Vulnerability

  52. 7.4CVE-2025-21183EPSS 0.5%

    Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

  53. 7.4CVE-2025-21182EPSS 0.5%

    Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

  54. 7.5CVE-2025-21181EPSS 3.5%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  55. 4.8CVE-2025-21179EPSS 0.7%

    DHCP Client Service Denial of Service Vulnerability