cve.bz

Microsoft Patch Tuesday, March 2025: the CVEs

Filter

Microsoft Patch Tuesday March 2025: the CVEs Microsoft published on 11 March 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 8.8CVE-2025-26645EPSS 3.2%

    Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  2. 7.5CVE-2025-26634EPSS 0.7%

    Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.

  3. 7.0CVE-2025-26633KEVExploitEPSS 30%

    Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

  4. 7.3CVE-2025-26631EPSS 0.6%

    Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.

  5. 7.8CVE-2025-26630EPSS 1.0%

    Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  6. 7.8CVE-2025-26629EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  7. 7.0CVE-2025-26627EPSS 0.9%

    Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.

  8. 7.1CVE-2025-25008EPSS 0.6%

    Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.

  9. 7.3CVE-2025-25003EPSS 0.5%

    Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

  10. 7.3CVE-2025-24998EPSS 0.5%

    Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

  11. 4.4CVE-2025-24997EPSS 0.6%

    Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

  12. 6.5CVE-2025-24996EPSS 1.3%

    External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

  13. 7.8CVE-2025-24995EPSS 0.6%

    Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

  14. 7.3CVE-2025-24994EPSS 1.2%

    Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

  15. 7.8CVE-2025-24993KEVEPSS 2.2%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

  16. 5.5CVE-2025-24992EPSS 1.1%

    Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.

  17. 5.5CVE-2025-24991KEVEPSS 2.0%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

  18. 6.8CVE-2025-24988EPSS 0.7%

    Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

  19. 6.8CVE-2025-24987EPSS 0.7%

    Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

  20. 6.5CVE-2025-24986EPSS 0.5%

    Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network.

  21. 7.8CVE-2025-24985KEVEPSS 3.9%

    Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

  22. 4.6CVE-2025-24984KEVEPSS 2.0%

    Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

  23. 7.0CVE-2025-24983KEVEPSS 1.9%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  24. 8.4CVE-2025-24084EPSS 0.7%

    Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.

  25. 7.8CVE-2025-24083EPSS 0.7%

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  26. 7.8CVE-2025-24082EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  27. 7.8CVE-2025-24081EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  28. 7.8CVE-2025-24080EPSS 0.7%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  29. 7.8CVE-2025-24079EPSS 0.7%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  30. 7.0CVE-2025-24078EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  31. 7.8CVE-2025-24077EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  32. 7.3CVE-2025-24076ExploitEPSS 3.2%

    Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2025-24075EPSS 0.7%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  34. 7.8CVE-2025-24072EPSS 0.5%

    Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

  35. 6.5CVE-2025-24071ExploitEPSS 23%

    Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

  36. 7.0CVE-2025-24070EPSS 1.0%

    Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

  37. 7.8CVE-2025-24067EPSS 0.7%

    Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2025-24066EPSS 0.7%

    Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  39. 8.1CVE-2025-24064EPSS 1.3%

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

  40. 7.8CVE-2025-24061EPSS 1.2%

    Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.

  41. 7.8CVE-2025-24059EPSS 0.5%

    Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2025-24057EPSS 1.0%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  43. 8.8CVE-2025-24056EPSS 1.6%

    Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.

  44. 4.3CVE-2025-24055EPSS 0.9%

    Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.

  45. 5.4CVE-2025-24054KEVExploitEPSS 62%

    External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

  46. 8.8CVE-2025-24051EPSS 1.5%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  47. 7.8CVE-2025-24050EPSS 0.5%

    Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  48. 8.4CVE-2025-24049EPSS 0.4%

    Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.

  49. 7.8CVE-2025-24048EPSS 0.5%

    Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2025-24046EPSS 0.5%

    Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

  51. 8.1CVE-2025-24045EPSS 1.3%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  52. 7.8CVE-2025-24044EPSS 0.6%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  53. 7.5CVE-2025-24043EPSS 0.9%

    Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.

  54. 8.1CVE-2025-24035EPSS 1.7%

    Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

  55. 4.3CVE-2025-21247EPSS 3.1%

    Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

  56. 6.7CVE-2025-21199EPSS 0.4%

    Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.

  57. 7.8CVE-2025-21180EPSS 0.9%

    Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.