Microsoft has released updates to address multiple vulnerabilities in Microsoft software with Microsoft's February 2025 Patch Tuesday.

Of the fixed vulnerabilities: 19 are elevation of privilege vulnerabilities, 2 Security Feature Bypass Vulnerabilities, 22 are remote code execution vulnerabilities, 1 is information disclosure vulnerabilities and 9 are denial of service vulnerabilities and 3- Spoofing Vulnerabilities.

This month's Patch Tuesday also includes fixes for four zero-day vulnerabilities:

• CVE-2025-21391 – Windows Storage Elevation of Privilege Vulnerability;
• CVE-2025-21418– Elevation of Privilege Vulnerability in the Windows Ancillary driver for WinSock;
• CVE-2025-21194 – Microsoft Surface Security Feature Bypass Vulnerability;
• CVE-2025-21377 – NTLM hash spoofing

More information on vulnerabilities and updates is available in the Microsoft’s February 2025 Security Updates page – microsoft.com.