Microsoft Patch Tuesday, March 2025: the CVEs

Microsoft Patch Tuesday March 2025: the CVEs Microsoft published on 11 March 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.0CVE-2025-26633KEVExploitEPSS 30%2025-03-11

   Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

2. 7.8CVE-2025-24993KEVEPSS 2.2%2025-03-11

   Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

3. 5.5CVE-2025-24991KEVEPSS 2.0%2025-03-11

   Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

4. 7.8CVE-2025-24985KEVEPSS 3.9%2025-03-11

   Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

5. 4.6CVE-2025-24984KEVEPSS 2.0%2025-03-11

   Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

6. 7.0CVE-2025-24983KEVEPSS 1.9%2025-03-11

   Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

7. 5.4CVE-2025-24054KEVExploitEPSS 62%2025-03-11

   External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.