Skip to the content
The Update Bureau
Security

KB5051989: all 32 vulnerabilities

Cumulative update for Windows 11, version 23H2, February 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

32 vulnerabilities fixed
2 exploited 1 critical 31 important
VulnerabilitySeverityCVSS
CVE-2025-21418 Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
CVE-2025-21391 Exploited
Windows Storage Elevation of Privilege Vulnerability
Important 7.1
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Critical 8.1
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Server Remote Code Execution Vulnerability
Important 8.8
Microsoft Digest Authentication Remote Code Execution Vulnerability
Important 8.8
Microsoft Digest Authentication Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Service Remote Code Execution Vulnerability
Important 8.8
Windows Core Messaging Elevation of Privileges Vulnerability
Important 7.8
Windows Kernel Security Feature Bypass Vulnerability
Important 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
Important 7.8
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Important 7.5
Windows Active Directory Domain Services API Denial of Service Vulnerability
Important 7.5
Windows Core Messaging Elevation of Privileges Vulnerability
Important 7.5
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Important 7.1
Windows Core Messaging Elevation of Privileges Vulnerability
Important 7.0
Windows Core Messaging Elevation of Privileges Vulnerability
Important 7.0
Windows Remote Desktop Configuration Service Tampering Vulnerability
Important 6.8
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Important 6.5
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Important 6.5
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Important 6.5
Internet Connection Sharing (ICS) Denial of Service Vulnerability
Important 6.5
NTLM Hash Disclosure Spoofing Vulnerability
Important 6.5
Windows Deployment Services Denial of Service Vulnerability
Important 6.0
Windows Kerberos Denial of Service Vulnerability
Important 5.9
Windows NTFS Elevation of Privilege Vulnerability
Important 3.3