Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

Summary: Microsoft released more than 50 security updates on March 11, 2025, including fixes for six zero-day vulnerabilities already under active exploitation. The zero-days include NTFS flaws CVE-2025-24991 and CVE-2025-24993 that require tricking a target into mounting a malicious virtual hard disk, CVE-2025-24983, an elevation of privilege bug in older Windows versions exploited via the PipeMagic backdoor, CVE-2025-24984, an NTFS weakness triggered by inserting a malicious USB drive, CVE-2025-24985, which allows malicious code installation via a mounted virtual hard disk, and CVE-2025-26633 in the Microsoft Management Console, which requires opening a malicious file.
What you should know: ESET found CVE-2025-24983 exploited in the wild against Windows 8.1 and Server 2012 R2, products whose security support ended more than a year ago, while the flaw also exists in Windows 10 build 1809 and the still-supported Windows Server 2016. This marks the sixth consecutive month Microsoft has published zero-day vulnerabilities on Patch Tuesday without rating any of them critical at publication.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-24983 CVE-2025-24984 CVE-2025-24985 CVE-2025-24991 CVE-2025-24993 CVE-2025-26633
Related: Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities Cyber Risks ·
Microsoft and Adobe Patch Tuesday, March 2025 Security Update Review | Qualys Cyber Risks ·
CVE-2025-26633: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability Known Exploited Vulnerabilities · Mar 11, 2025