{"id":4566,"date":"2025-02-11T21:55:00","date_gmt":"2025-02-11T21:55:00","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/microsofts-february-patch-lessonent-for-januarys-weight\/"},"modified":"2025-02-11T21:55:00","modified_gmt":"2025-02-11T21:55:00","slug":"microsofts-february-patch-lessonent-for-januarys-weight","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/microsofts-february-patch-lessonent-for-januarys-weight\/","title":{"rendered":"Microsoft&#8217;s February Patch, Lessonent for January&#8217;s Weight."},"content":{"rendered":"\n<\/p>\n<p><strong>Microsoft&#8217;s February Security Update: Fewer Vulnerabilities, But Still a Priority<\/strong><\/p>\n<p>Microsoft&#8217;s February security update contains fewer vulnerabilities for administrators to address compared to a month ago, but there are still several critical flaws that require immediate attention.<\/p>\n<p><strong>Top Security Concerns<\/strong><\/p>\n<ul>\n<li><strong>Two Zero-Day Vulnerabilities<\/strong>: Attackers are actively exploiting two zero-day vulnerabilities in the wild, CVE-2025-21418 (CVSS score 7.8) and CVE-2025-21391 (CVSS 7.1). These vulnerabilities can be exploited to gain SYSTEM-level privileges on affected systems.<\/li>\n<li><strong>Zero-Day Patch<\/strong>: Microsoft has released a patch for a previously disclosed zero-day vulnerability (CVE-2025-21376) in December 2024.<\/li>\n<li><strong>Common Vulnerabilities and Exposures (CVEs)<\/strong>: The update addresses 63 unique CVEs, including several that can have severe consequences for affected organizations.<\/li>\n<\/ul>\n<p><strong>CVEs and Their Severity<\/strong><\/p>\n<ul>\n<li><strong>CVE-2025-21418<\/strong>: A local exploit vulnerability that allows attackers to disable security tooling, dump credentials, or move laterally across the network.<\/li>\n<li><strong>CVE-2025-21391<\/strong>: A Windows Storage zero-day vulnerability that can be exploited to delete targeted files on a system.<\/li>\n<li><strong>CVE-2025-21377<\/strong>: An NTLM hash disclosure spoofing vulnerability that can be exploited to steal NTLM credentials.<\/li>\n<\/ul>\n<p><strong>Critical Flaws<\/strong><\/p>\n<ul>\n<li><strong>CVE-2025-21379<\/strong>: A remote code execution (RCE) vulnerability in the DHCP client service (CVSS Score 7.1).<\/li>\n<li><strong>CVE-2025-21177<\/strong>: A privilege elevation vulnerability in Microsoft Dynamics 365 Sales (CVSS Score 8.7).<\/li>\n<li><strong>CVE-2025-21381<\/strong>: An RCE vulnerability in Microsoft Excel (CVSS 7.8).<\/li>\n<li><strong>CVE-2025-21376<\/strong>: An RCE vulnerability in Windows LDAP (CVSS 8.1).<\/li>\n<\/ul>\n<p><strong>Impact and Recommendations<\/strong><\/p>\n<ul>\n<li><strong>Organizations<\/strong>: Treat CVE-2025-21377 as a high-priority bug that needs immediate attention. Even with a patch available, the vulnerability can be exploited to steal NTLM credentials.<\/li>\n<li><strong>Administrators<\/strong>: Apply patches for CVE-2025-21418, CVE-2025-21391, and CVE-2025-21379 immediately.<\/li>\n<li><strong>Customers<\/strong>: Take note of the CAR (customer action required) attribute in CVE-2025-21177, which means no customer action is required, but Microsoft has already addressed the issue on its end.<\/li>\n<\/ul>\n<p><strong>Security Researchers&#8217; Insights<\/strong><\/p>\n<ul>\n<li><strong>Kev Breen<\/strong>: Senior director, cyber threat research at Immersive Labs, emphasizes the importance of addressing CVE-2025-21377 and CVE-2025-21418.<\/li>\n<li><strong>Natalie Silva<\/strong>: Lead cyber security engineer at Immersive Labs, highlights the risk of CVE-2025-21391, which can be exploited to delete targeted files on a system.<\/li>\n<li><strong>Tyler Reguly<\/strong>: Associate director security R\\&amp;D at Fortra, notes that the update should be issued outside of Patch Tuesday since it does not require customer action.<\/li>\n<\/ul>\n\n<br \/><a href=\"https:\/\/www.darkreading.com\/application-security\/microsofts-february-patch-lighter-lift-januarys\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft&#8217;s February Security Update: Fewer Vulnerabilities, But Still a Priority Microsoft&#8217;s February security update contains fewer vulnerabilities for administrators to address compared to a month ago, but there are still&#8230;<\/p>\n","protected":false},"author":19,"featured_media":4567,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-4566","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/02\/patchtuesday_Somphop_Krittayaworagul_shutterstock.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/4566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=4566"}],"version-history":[{"count":0,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/4566\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/4567"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=4566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=4566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=4566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}