IT SBIT Services
Schneeberger
DEEN
Patch Tuesday

Patch Tuesday February 2025 – known issues, zero-days and what to do

On 11 Feb 2025 Microsoft fixed 66 vulnerabilities – critical: 6, already exploited (zero-days): 3. Known issues with the updates: none known.

66vulnerabilities
6critical
3zero-days
0known issues

What to do now

  • Zero-days first: 3 vulnerabilities are already being exploited (CVE-2025-24989, CVE-2025-21418, CVE-2025-21391) – install the updates as soon as possible, starting with servers and exposed systems.
  • 6 critical vulnerabilities (mainly Windows, Microsoft Office, Browser (Edge)) – roll out promptly after a short test.
  • No issues are known so far with the updates of this month – test and roll out as usual.

Zero-days: already exploited

Critical vulnerabilities (5)

Updates (KB) of this month

KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.

UpdateProduct familyVulnerabilitiesKnown issues
KB5051987Windows36none known
KB5052000Windows33none known
KB5051979Windows33none known
KB5052106Windows33none known
KB5051974Windows31none known
KB5051989Windows31none known
KB5052105Windows6none known
KB5002679Microsoft Office5none known
KB5002687Microsoft Office5none known
KB5051980Windows3none known
KB5002179Microsoft Office2none known
KB5002684Microsoft Office1none known
Show 4 more updates
UpdateProduct familyVulnerabilitiesKnown issues
KB5002686Microsoft Office1none known
KB5002685Microsoft Office1none known
KB5002678Microsoft Office1none known
KB5002681Microsoft Office1none known

Known issues with the updates

No issues are known so far with the updates of this month.

By product family

  • Windows37
  • Microsoft Office10
  • Browser (Edge)8
  • Developer tools (.NET, Visual Studio …)3
  • Apps3
  • Azure2
  • Microsoft Dynamics2
  • Other1

More about this month

Where the information comes from

Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.

Affected? We can help.

We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.