InfoSecBulletin Cybersecurity for mankind
Microsoft’s February 2025 Patch Tuesday includes security updates for 55 vulnerabilities, including four zero-days, two of which are currently being exploited. This Patch Tuesday addresses three critical remote code execution vulnerabilities.
The number of bugs in each vulnerability category is listed below:
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
19 Elevation of Privilege Vulnerabilities
2 Security Feature Bypass Vulnerabilities
22 Remote Code Execution Vulnerabilities
1 Information Disclosure Vulnerabilities
9 Denial of Service Vulnerabilities
3 Spoofing Vulnerabilities
This excludes a critical elevation of privileges flaw in Microsoft Dynamics 365 Sales and 10 vulnerabilities in Microsoft Edge fixed on February 6.
Two actively exploited zero-day disclosed:
CVE-2025-21391 : Windows Storage Elevation of Privilege Vulnerability
Microsoft has patched a serious security flaw that can let attackers delete files. According to Microsoft’s advisory, an attacker can only delete specific files on a system. This vulnerability does not expose confidential information but can cause data loss, potentially leading to service downtime. No details are available on how this flaw was exploited or who reported it.
CVE-2025-21418: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
This vulnerability lets attackers obtain high-level access in Windows. It’s unclear how the flaw was exploited in attacks, and Microsoft reported that it was disclosed anonymously.
The publicly disclosed zero-days are:
CVE-2025-21194: Microsoft Surface Security Feature Bypass Vulnerability
CVE-2025-21377: NTLM Hash Disclosure Spoofing Vulnerability
Recent updates from other companies:
Other vendors who released updates or advisories in February 2025 include:
Adobe released security updates for numerous products, including Adobe Photoshop, Substance3D, Illustrator, and Animate.
AMD released mitigations and firmware updates to address a vulnerability that can be exploited to load malicious CPU microcode.
Apple released a security update for a zero-day exploited in ‘extremely sophisticated’ attacks.
Cisco released security updates for multiple products, including Cisco IOS, ISE, NX-OS, and Identity Services.
Google fixed an actively exploited zero-day flaw in Android Kernel’s USB Video Class driver.
Ivanti released security updates for Connect Secure, Neurons for MDM, and Cloud Service Application.
Fortinet released security updates for numerous products, including FortiManager, FortiOS, FortiAnalyzer, and FortiSwitchManager.
Netgear fixed two critical vulnerabilities affecting multiple WiFi router models.
SAP releases security updates for multiple products.
SonicWall firewall vuln allows hackers to hijack VPN sessions
