Microsoft Security Response Center Blog Alerts

Chromium: CVE -2025-0998 Out of bounds memory access in V8

Published February 14, 2025

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.

Chromium: CVE -2025-0997 Use after free in Navigation

Published February 14, 2025

Chromium: CVE -2025-0995 Use after free in V8

Published February 14, 2025

Chromium: CVE -2025-0996 Inappropriate implementation in Browser UI

Published February 14, 2025

CVE-2025-21392 Microsoft Office Remote Code Execution Vulnerability

Published February 11, 2025

Information published.

CVE-2025-21190 Windows Telephony Service Remote Code Execution Vulnerability

Published February 11, 2025

Information published.

CVE-2025-21383 Microsoft Excel Information Disclosure Vulnerability

Published February 11, 2025

Information published.

CVE-2023-24932 Secure Boot Security Feature Bypass Vulnerability

Published February 11, 2025

The following updates have been made to CVE-2023-24932: 1) In the Security Updates table, added all supported versions of the following as they are affected by this vulnerability: Windows 11 24H2 and Windows Server 2025. 2) Further, to comprehensively address this vulnerability, Microsoft has released February 2025 security updates for all affected versions of Windows 11 version 22H2 and Windows 11 version 23H2.

Microsoft recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.