Patch Tuesday - February 2025

🗓️ 11 Feb 2025 21:30:07Reported by Adam BarnettType

Patch Tuesday February 2025 patches 56 flaws, including two in the wild exploits and a zero-day privilege elevation in the Ancillary Function Driver.

Reporter	Title	Published	Views	Family All 248
ATTACKERKB	CVE-2025-21418	11 Feb 202500:00	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Chromium	16 Jun 202511:28	–	astralinux
Information Security Automation	February Microsoft Patch Tuesday	12 Feb 202522:01	–	avleonov
Information Security Automation	March episode “In the Trend of VM” (#13): vulnerabilities of Microsoft, PAN-OS, СommuniGate and who should patch hosts with deployed application	22 Apr 202512:51	–	avleonov
FreeBSD	chromium -- multiple security fixes	4 Feb 202500:00	–	freebsd
BDU FSTEC	The vulnerability of the driver for auxiliary functions of the Winsock application programming interface on Windows operating systems allows a hacker to elevate their privileges to the SYSTEM level.	12 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Windows operating system DHCP clients allows a perpetrator to execute arbitrary code.	13 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to incorrect handling of symbolic links before accessing files. This allows attackers to exploit their privileges.	13 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook for Android client, related to information representation errors in the user interface, allows a hacker to perform spear-phishing attacks.	17 Feb 202500:00	–	bdu_fstec
BDU FSTEC	Microsoft Edge browser’s vulnerability, related to errors in data type mixing, allows attackers to execute arbitrary code.	17 Feb 202500:00	–	bdu_fstec