CVE-2025-21391, the zero-day Windows storage flaw, stems from the way Windows resolves file paths and follows links, Walters said. File deletion is just the beginning of the problems it could cause, as it could lead to privilege escalation, unwanted access to security logs or configurations, malware injection, data manipulation, or other attacks.

Microsoft is correcting 57 vulnerabilities in its February Patch Tuesday, two of which are being actively exploited in the wild, and three of which are ‘critical’.

The latest updates resolve more glitches and security flaws - some critical - in Windows 11 23H2 and 24H2, so you'll want to install them sooner rather than later.

Microsoft patched 63 CVEs in the February 2025 Patch Tuesday updates. Here are the most dangerous threats that were avoided.

Microsoft patches 63 flaws, including two exploited Windows vulnerabilities (CVE-2025-21391, CVE-2025-21418). CISA requires fixes by March 4.

Microsoft’s February 2025 cumulative update brings much-needed relief to Windows 11 users, fixing Auto HDR issues that caused game crashes, audio output disruptions, and USB webcam detection problems,

Windows 11 update packs a raft of important fixes for nasty audio bugs and an Auto HDR glitch that has been seriously frustrating for gamers.