February 2025 Patch Tuesday: Microsoft Fixes 63 Vulnerabilities, Including Two Actively Exploited Zero-Days

**Executive summary:** Microsoft’s February 2025 Patch Tuesday addresses 63 vulnerabilities — including two actively exploited zero-days (CVE-2025-21391 and CVE-2025-21418) and several critical RCE and privilege-escalation flaws — while SAP and Ivanti also released urgent security patches; organizations are advised to prioritize and apply updates immediately to mitigate active and high-risk exposure.