Microsoft Patch Tuesday March 2025: Fixes 57 vulnerabilities

Microsoft released the March 2025 Patch Tuesday, which fixes 57 vulnerabilities, including seven zero-days.

In the list below, you can see the categories of bugs that are being fixed this month:

• 23 vulnerabilities that allow remote code execution
• 23 vulnerabilities that allow elevation of privilege
• 4 vulnerabilities that allow information disclosure
• 3 vulnerabilities that allow spoofing
• 3 vulnerabilities that allow bypassing security features
• 1 vulnerability that allows Denial of Service attacks

The above numbers do not include Mariner bugs and 10 Microsoft Edge vulnerabilities that were patched a few days ago.

See also: Zygote Injection vulnerability allows code execution on Android

Microsoft Patch Tuesday March 2025: Zero-day vulnerabilities

This month's Patch Tuesday fixes six zero-day vulnerabilities that have already been exploited in attacks and one that has been publicly disclosed. Microsoft classifies a bug as a zero-day when it is publicly disclosed or exploited in attacks and no official patch is available.

Vulnerabilities that have been exploited:

CVE-2025-24983: Windows Win32 Kernel Subsystem – Elevation of Privilege

Microsoft says this vulnerability allows local attackers to gain SYSTEM privilegesafter winning a race condition. Microsoft has not provided details on how the flaw could be exploited in attacks.

CVE-2025-24984: Windows NTFS – Information Disclosure Vulnerability

Microsoft says this vulnerability can be exploited by attackers who have physical access to the device and can insert a malicious USB drive. The exploit allows attackers to read parts of the heap memory and steal information.

CVE-2025-24985: Windows Fast FAT File System Driver – Remote Code Execution

Microsoft's March Patch Tuesday also fixes a zero-day vulnerability that allows remote code execution.

“An attacker could trick a local user on a vulnerable system into installing a specially crafted VHD that would then trigger the vulnerability,” Microsoft explains. The company has not shared details on how the vulnerability could be exploited.

See also: CISA: Advantive VeraCore and Ivanti vulnerabilities in the KEV List

CVE-2025-24991: Windows NTFS – Information Disclosure Vulnerability

Microsoft says that attackers can exploit this flaw to read part of the heap memory and steal information.

Attackers can exploit the flaw by tricking a user into attaching a malicious VHD file.

CVE-2025-24993: Windows NTFS – Remote Code Execution

Microsoft says this vulnerability allows an attacker to execute arbitrary code.

"An attacker could trick a local user on a vulnerable system into installing a specially crafted VHD that would then trigger the vulnerability," Microsoft explains.

CVE-2025-26633: Microsoft Management Console – Security Bypass

"In an email or instant messaging, an attacker could send the targeted user a specially crafted file that is designed to exploit the vulnerability," Microsoft explains.

“In any case, an attacker would have no way to force a user to view content controlled by the attacker. Instead, an attacker would have to convince a user to take action. For example, an attacker could entice a user to either click on a link that directs the user to the attacker's website or send a malicious attachment“.

See also: Learn everything about out-of-bounds write vulnerabilities

As we mentioned earlier, Microsoft's March Patch Tuesday also fixes a zero-day vulnerability that has just been publicly disclosed. It is:

CVE-2025-26630: Microsoft Access – Remote Code Execution

To exploit the vulnerability, a user must be tricked into opening a specially crafted Access file. This can be done through phishing or social engineering attacks.

However, the flaw cannot be exploited through the preview window.

Microsoft Patch Tuesday March 2025: All vulnerabilities fixed:

Microsoft Patch Tuesday March 2025

Microsoft Patch Tuesday is a practice followed by Microsoft, where on the second Tuesday of each month it releases updates and fixes for its operating systems, programs, and applications. These updates typically include security, performance improvements, and new features.

The purpose of Microsoft Patch Tuesday is to provide Microsoft users with the best possible user experience by fixing issues and ensuring the security of their systems. Security updates help protect systems from security vulnerabilities and malware. These updates fix known security issues and strengthen the resilience of systems against attacks.

Source: www.bleepingcomputer.com