Microsoft Patch Tuesday for February Includes Two Zero Days Under Attack

Microsoft’s February 2025 Patch Tuesday addresses 63 Microsoft CVEs (plus non-Microsoft CVEs), including four zero-day vulnerabilities—two of which are actively exploited—and eight more high-risk flaws deemed “Exploitation More Likely”; affected components include Windows Storage, WinSock, SharePoint, LDAP, Surface features and NTLM, with several RCE and elevation-of-privilege issues that administrators should prioritize patching.