ThreatCluster

Microsoft CVEs CVE-2025-68372 and CVE-2025-68366 Published

First seen 18 Feb 2026, 15:24 UTC Api.Msrc.Microsoft 45

Article Content

Browse articles
ThreatCluster

On February 18, 2026, Microsoft published information regarding two vulnerabilities, CVE-2025-68372 and CVE-2025-68366, both of which were published on December 24, 2025. These vulnerabilities are related to the NBD (Network Block Device) and involve configuration issues in specific functions. Affected systems may require updates to mitigate potential risks associated with these vulnerabilities.

Timeline

2025-12-24
CVE-2025-68372 published
2025-12-24
CVE-2025-68366 published
2026-02-18
Information published regarding CVEs