Microsoft Patch Tuesday — March 2025

Tuesday, 11 March 2025

Vulnerabilities: 58
Critical: 0
High: 45
Zero-days: 6
Public exploit: 6

Exploited 7

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2025-24985 Zero-day Public exploit Windows Fast FAT File System Driver Remote Code Execution Vulnerability
EPSS 3.9%
High 7.8
CVE-2025-24993 Zero-day Windows NTFS Remote Code Execution Vulnerability
EPSS 2.2%
High 7.0
CVE-2025-26633 Zero-day Public exploit Microsoft Management Console Security Feature Bypass Vulnerability
EPSS 30%
High 7.0
CVE-2025-24983 Zero-day Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2025-24054 Exploited Public exploit NTLM Hash Disclosure Spoofing Vulnerability
EPSS 62%
Medium 5.5
CVE-2025-24991 Zero-day Windows NTFS Information Disclosure Vulnerability
EPSS 2%
Medium 4.6
CVE-2025-24984 Zero-day Windows NTFS Information Disclosure Vulnerability
EPSS 2%

Public exploit code 3

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.1
CVE-2025-24035 Public exploit Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.7%
High 7.3
CVE-2025-24076 Public exploit Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
EPSS 3.2%
Medium 6.5
CVE-2025-24071 Public exploit Microsoft Windows File Explorer Spoofing Vulnerability
EPSS 23%

All vulnerabilities 58

High45 Show

High 7.8
CVE-2025-24985 Zero-day Public exploit Windows Fast FAT File System Driver Remote Code Execution Vulnerability
EPSS 3.9%
High 7.8
CVE-2025-24993 Zero-day Windows NTFS Remote Code Execution Vulnerability
EPSS 2.2%
High 7.0
CVE-2025-26633 Zero-day Public exploit Microsoft Management Console Security Feature Bypass Vulnerability
EPSS 30%
High 7.0
CVE-2025-24983 Zero-day Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
EPSS 1.9%
High 8.8
CVE-2025-24051 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2025-24056 Windows Telephony Service Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2025-26645 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 3.2%
High 8.4
CVE-2025-24049 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
High 8.4
CVE-2025-24084 Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability
High 8.1
CVE-2025-24035 Public exploit Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.7%
High 8.1
CVE-2025-24045 Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.3%
High 8.1
CVE-2025-24064 Windows Domain Name Service Remote Code Execution Vulnerability
EPSS 1.3%
High 7.8
CVE-2025-21180 Windows exFAT File System Remote Code Execution Vulnerability
High 7.8
CVE-2025-24044 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24046 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24048 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24050 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24057 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-24059 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24061 Windows Mark of the Web Security Feature Bypass Vulnerability
EPSS 1.2%
High 7.8
CVE-2025-24066 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24067 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24072 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
High 7.8
CVE-2025-24075 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-24077 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-24079 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-24080 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-24081 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-24082 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-24083 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-24995 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-26629 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-26630 Microsoft Access Remote Code Execution Vulnerability
High 7.5
CVE-2025-24043 WinDbg Remote Code Execution Vulnerability
High 7.5
CVE-2025-26634 Windows Core Messaging Elevation of Privileges Vulnerability
High 7.3
CVE-2025-24076 Public exploit Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
EPSS 3.2%
High 7.3
CVE-2025-24994 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.3
CVE-2025-24998 Visual Studio Elevation of Privilege Vulnerability
High 7.3
CVE-2025-25003 Visual Studio Elevation of Privilege Vulnerability
High 7.3
CVE-2025-26631 Visual Studio Code Elevation of Privilege Vulnerability
High 7.2
CVE-2025-24053 Microsoft Dataverse Elevation of Privilege Vulnerability
High 7.1
CVE-2025-25008 Windows Server Elevation of Privilege Vulnerability
High 7.0
CVE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
EPSS 1%
High 7.0
CVE-2025-24078 Microsoft Word Remote Code Execution Vulnerability
High 7.0
CVE-2025-26627 Azure Arc Installer Elevation of Privilege Vulnerability

Medium13 Show

Medium 6.5
CVE-2025-24054 Exploited Public exploit NTLM Hash Disclosure Spoofing Vulnerability
EPSS 62%
Medium 5.5
CVE-2025-24991 Zero-day Windows NTFS Information Disclosure Vulnerability
EPSS 2%
Medium 4.6
CVE-2025-24984 Zero-day Windows NTFS Information Disclosure Vulnerability
EPSS 2%
Medium 6.7
CVE-2025-21199 Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-24987 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Medium 6.6
CVE-2025-24988 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Medium 6.5
CVE-2025-24071 Public exploit Microsoft Windows File Explorer Spoofing Vulnerability
EPSS 23%
Medium 6.5
CVE-2025-24986 Azure Promptflow Remote Code Execution Vulnerability
Medium 6.5
CVE-2025-24996 NTLM Hash Disclosure Spoofing Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2025-24992 Windows NTFS Information Disclosure Vulnerability
EPSS 1.1%
Medium 4.4
CVE-2025-24997 DirectX Graphics Kernel File Denial of Service Vulnerability
Medium 4.3
CVE-2025-21247 MapUrlToZone Security Feature Bypass Vulnerability
EPSS 3.1%
Medium 4.3
CVE-2025-24055 Windows USB Video Class System Driver Information Disclosure Vulnerability