Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Service Advisory

Due to a worldwide Microsoft Outlook disruption, emails to and from CSA may be delayed. We apologise for the inconvenience.

Cyber Security Agency of Singapore
Monthly Patch

February 2025 Monthly Patch

12 February 2025

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

The vulnerabilities that have been classified as Critical in severity are listed in the table below.

For the full list of security patches released by Microsoft, please refer to https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2025-Feb (opens in new tab)

Critical Vulnerabilities

CVE Number

CVE Name

Base Score

Reference

CVE-2025-21177

Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability

8.7

https://msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2025-21177

CVE-2025-21376

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.1

https://msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2025-21376

CVE-2025-21381

Microsoft Excel Remote Code Execution Vulnerability

7.8

https://msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2025-21381

CVE-2025-21379

DHCP Client Service Remote Code Execution Vulnerability

7.1

https://msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2025-21379