Microsoft · Security update · February 11, 2025

KB5052020: February 2025 security update

KB5052020, released February 11, 2025, fixes 23 CVEs across 2 products. One of them is being exploited (CVE-2025-21418); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
23
1 rated Critical
Exploited
1
CVE-2025-21418
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.3993
98th percentile

Priority of the 23 CVEs

Patch now 1 Urgent 4 High 14 Routine 4

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-21418 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0213 KEVExploited
Urgent CVE-2025-21377 Windows NTLM Spoofing 6.5 0.3993 DisclosedMore likely
Urgent CVE-2025-21376 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 8.1 0.0931 More likely
Urgent CVE-2025-21420 Windows Disk Cleanup Tool Elevation of Privilege 7.8 0.0367 More likely
Urgent CVE-2025-21419 Windows Setup Files Cleanup Elevation of Privilege 7.1 0.0072 More likely
High CVE-2025-21181 Windows Message Queuing Denial of Service 7.5 0.0348 Exploitation Less Likely
High CVE-2025-21371 Windows Telephony Service Remote Code Execution 8.8 0.0243 Exploitation Less Likely
High CVE-2025-21368 Microsoft Digest Authentication Remote Code Execution 8.8 0.0215 Exploitation Less Likely
High CVE-2025-21369 Microsoft Digest Authentication Remote Code Execution 8.8 0.0215 Exploitation Less Likely
High CVE-2025-21406 Windows Telephony Service Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2025-21407 Windows Telephony Service Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2025-21410 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2025-21190 Windows Telephony Service Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2025-21200 Windows Telephony Service Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2025-21201 Windows Telephony Server Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2025-21208 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2025-21373 Windows Installer Elevation of Privilege 7.8 0.0080 Exploitation Less Likely
High CVE-2025-21375 Microsoft Streaming Service Elevation of Privilege 7.8 0.0065 Exploitation Less Likely
High CVE-2025-21359 Windows Kernel Security Feature Bypass 7.8 0.0056 Exploitation Less Likely
Routine CVE-2025-21350 Windows Kerberos Denial of Service 5.9 0.0213 Exploitation Less Likely
Routine CVE-2025-21352 Windows Internet Connection Sharing (ICS) Denial of Service 6.5 0.0104 Exploitation Less Likely
Routine CVE-2025-21347 Windows Update Stack Denial of Service 6.0 0.0066 Exploitation Less Likely
Routine CVE-2025-21337 Microsoft Windows Elevation of Privilege 3.3 0.0061 Exploitation Less Likely
Showing 1 to 23 of 23 1