InfoSecBulletin Cybersecurity for mankind
Microsoft’s February 2025 Patch Tuesday includes security updates for 55 vulnerabilities, including four zero-days, two of which are currently being exploited. This Patch Tuesday addresses three critical remote code execution vulnerabilities.
The number of bugs in each vulnerability category is listed below:
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
19 Elevation of Privilege Vulnerabilities
2 Security Feature Bypass Vulnerabilities
22 Remote Code Execution Vulnerabilities
1 Information Disclosure Vulnerabilities
9 Denial of Service Vulnerabilities
3 Spoofing Vulnerabilities
This excludes a critical elevation of privileges flaw in Microsoft Dynamics 365 Sales and 10 vulnerabilities in Microsoft Edge fixed on February 6.
Two actively exploited zero-day disclosed:
CVE-2025-21391 : Windows Storage Elevation of Privilege Vulnerability
Microsoft has patched a serious security flaw that can let attackers delete files. According to Microsoft’s advisory, an attacker can only delete specific files on a system. This vulnerability does not expose confidential information but can cause data loss, potentially leading to service downtime. No details are available on how this flaw was exploited or who reported it.
CVE-2025-21418:Â Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
This vulnerability lets attackers obtain high-level access in Windows. It’s unclear how the flaw was exploited in attacks, and Microsoft reported that it was disclosed anonymously.
The publicly disclosed zero-days are:
CVE-2025-21194:Â Microsoft Surface Security Feature Bypass Vulnerability
CVE-2025-21377: NTLM Hash Disclosure Spoofing Vulnerability
Recent updates from other companies:
Other vendors who released updates or advisories in February 2025 include:
Adobe released security updates for numerous products, including Adobe Photoshop, Substance3D, Illustrator, and Animate.
​AMD released mitigations and firmware updates to address a vulnerability that can be exploited to load malicious CPU microcode.
Apple released a security update for a zero-day exploited in ‘extremely sophisticated’ attacks.
Cisco released security updates for multiple products, including Cisco IOS, ISE, NX-OS, and Identity Services.
Google fixed an actively exploited zero-day flaw in Android Kernel’s USB Video Class driver.
Ivanti released security updates for Connect Secure, Neurons for MDM, and Cloud Service Application.
Fortinet released security updates for numerous products, including FortiManager, FortiOS, FortiAnalyzer, and FortiSwitchManager.
Netgear fixed two critical vulnerabilities affecting multiple WiFi router models.
SAP releases security updates for multiple products.
SonicWall firewall vuln allows hackers to hijack VPN sessions
