Microsoft Fixes 61 Flaws Including 4 Critical Bugs and 2 Zero-Days in Windows

Microsoft released its February 2025 security updates to address 61 vulnerabilities across Windows, Office, SharePoint, Edge, Visual Studio, CBL Mariner, and other products. The bundle included 26 remote code execution flaws and four critical vulnerabilities, with notable high-risk issues affecting Microsoft Dynamics 365 Sales, Microsoft Excel, Windows LDAP, and the Windows DHCP Client Service. Microsoft also published individual advisories for vulnerabilities including CVE-2025-21376 and CVE-2025-21177 as part of the release.

The update cycle also fixed two actively exploited zero-days: CVE-2025-21391 in Windows Storage and CVE-2025-21418 in the Windows Ancillary Function Driver for WinSock. Security guidance accompanying the release urged organizations to prioritize deployment of the February patch bundle because the affected components are widely used across enterprise Windows environments and Microsoft application stacks.