Microsoft · Security update · February 11, 2025

KB5052006: February 2025 cumulative update for Windows 10 1607

KB5052006, released February 11, 2025, fixes 33 CVEs across 4 products. 2 of them are being exploited (CVE-2025-21391); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
33
1 rated Critical
Exploited
2
CVE-2025-21391
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.3993
98th percentile

Priority of the 33 CVEs

Patch now 2 Urgent 7 High 16 Routine 8

Applies to

ProductBuild after install
Windows 10 Version 1607 for 32-bit Systems14393.7785
Windows 10 Version 1607 for x64-based Systems14393.7785
Windows Server 201614393.7785
Windows Server 2016 (Server Core installation)14393.7785

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-21391 Windows Storage Elevation of Privilege 7.1 0.0228 KEVExploited
Patch now CVE-2025-21418 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0213 KEVExploited
Urgent CVE-2025-21377 Windows NTLM Spoofing 6.5 0.3993 DisclosedMore likely
Urgent CVE-2025-21376 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0931 More likely
Urgent CVE-2025-21420 Windows Disk Cleanup Tool Elevation of Privilege 7.8 0.0367 More likely
Urgent CVE-2025-21358 Windows CoreMessaging Elevation of Privilege 7.8 0.0076 More likely
Urgent CVE-2025-21419 Windows Setup Files Cleanup Elevation of Privilege 7.1 0.0072 More likely
Urgent CVE-2025-21414 Windows DWM Core Library Elevation of Privilege 7.0 0.0061 More likely
Urgent CVE-2025-21184 Windows CoreMessaging Elevation of Privilege 7.0 0.0061 More likely
High CVE-2025-21181 Windows Message Queuing Denial of Service 7.5 0.0348 Exploitation Less Likely
High CVE-2025-21351 Active Directory Domain Services Denial of Service 7.5 0.0247 Exploitation Less Likely
High CVE-2025-21371 Windows Telephony Service Remote Code Execution 8.8 0.0243 Exploitation Less Likely
High CVE-2025-21368 Microsoft Digest Authentication Remote Code Execution 8.8 0.0215 Exploitation Less Likely
High CVE-2025-21369 Microsoft Digest Authentication Remote Code Execution 8.8 0.0215 Exploitation Less Likely
High CVE-2025-21406 Windows Telephony Service Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2025-21407 Windows Telephony Service Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2025-21410 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2025-21190 Windows Telephony Service Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2025-21200 Windows Telephony Service Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2025-21201 Windows Telephony Server Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2025-21208 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2025-21373 Windows Installer Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2025-26634 Windows Core Messaging Elevation of Privilege 7.5 0.0067 Exploitation Less Likely
High CVE-2025-21375 Microsoft Streaming Service Elevation of Privilege 7.8 0.0065 Exploitation Less Likely
High CVE-2025-21359 Windows Kernel Security Feature Bypass 7.8 0.0056 Exploitation Less Likely
Showing 1 to 25 of 33 1Next