Microsoft’s March 2025 Patch Tuesday Addresses 57 Vulnerabilities, Including 7 Critical Zero-Day Flaws

Tag
CVE ID
CVE Title
Severity

.NET
CVE-2025-24043
WinDbg Distant Code Execution Vulnerability
Necessary

ASP.NET Core & Visible Studio
CVE-2025-24070
ASP.NET Core and Visible Studio Elevation of Privilege Vulnerability
Necessary

Azure Agent Installer
CVE-2025-21199
Azure Agent Installer for Backup and Web site Restoration Elevation of Privilege Vulnerability
Necessary

Azure Arc
CVE-2025-26627
Azure Arc Installer Elevation of Privilege Vulnerability
Necessary

Azure CLI
CVE-2025-24049
Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
Necessary

Azure PromptFlow
CVE-2025-24986
Azure Promptflow Distant Code Execution Vulnerability
Necessary

Kernel Streaming WOW Thunk Service Driver
CVE-2025-24995
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Necessary

Microsoft Native Safety Authority Server (lsasrv)
CVE-2025-24072
Microsoft Native Safety Authority (LSA) Server Elevation of Privilege Vulnerability
Necessary

Microsoft Administration Console
CVE-2025-26633
Microsoft Administration Console Safety Function Bypass Vulnerability
Necessary

Microsoft Workplace
CVE-2025-24083
Microsoft Workplace Distant Code Execution Vulnerability
Necessary

Microsoft Workplace
CVE-2025-26629
Microsoft Workplace Distant Code Execution Vulnerability
Necessary

Microsoft Workplace
CVE-2025-24080
Microsoft Workplace Distant Code Execution Vulnerability
Necessary

Microsoft Workplace
CVE-2025-24057
Microsoft Workplace Distant Code Execution Vulnerability
Essential

Microsoft Workplace Entry
CVE-2025-26630
Microsoft Entry Distant Code Execution Vulnerability
Necessary

Microsoft Workplace Excel
CVE-2025-24081
Microsoft Excel Distant Code Execution Vulnerability
Necessary

Microsoft Workplace Excel
CVE-2025-24082
Microsoft Excel Distant Code Execution Vulnerability
Necessary

Microsoft Workplace Excel
CVE-2025-24075
Microsoft Excel Distant Code Execution Vulnerability
Necessary

Microsoft Workplace Phrase
CVE-2025-24077
Microsoft Phrase Distant Code Execution Vulnerability
Necessary

Microsoft Workplace Phrase
CVE-2025-24078
Microsoft Phrase Distant Code Execution Vulnerability
Necessary

Microsoft Workplace Phrase
CVE-2025-24079
Microsoft Phrase Distant Code Execution Vulnerability
Necessary

Microsoft Streaming Service
CVE-2025-24046
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Necessary

Microsoft Streaming Service
CVE-2025-24067
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Necessary

Microsoft Home windows
CVE-2025-25008
Home windows Server Elevation of Privilege Vulnerability
Necessary

Microsoft Home windows
CVE-2024-9157
Synaptics: CVE-2024-9157 Synaptics Service Binaries DLL Loading Vulnerability
Necessary

Distant Desktop Shopper
CVE-2025-26645
Distant Desktop Shopper Distant Code Execution Vulnerability
Essential

Function: DNS Server
CVE-2025-24064
Home windows Area Title Service Distant Code Execution Vulnerability
Essential

Function: Home windows Hyper-V
CVE-2025-24048
Home windows Hyper-V Elevation of Privilege Vulnerability
Necessary

Function: Home windows Hyper-V
CVE-2025-24050
Home windows Hyper-V Elevation of Privilege Vulnerability
Necessary

Visible Studio
CVE-2025-24998
Visible Studio Elevation of Privilege Vulnerability
Necessary

Visible Studio
CVE-2025-25003
Visible Studio Elevation of Privilege Vulnerability
Necessary

Visible Studio Code
CVE-2025-26631
Visible Studio Code Elevation of Privilege Vulnerability
Necessary

Home windows Frequent Log File System Driver
CVE-2025-24059
Home windows Frequent Log File System Driver Elevation of Privilege Vulnerability
Necessary

Home windows Cross Gadget Service
CVE-2025-24994
Microsoft Home windows Cross Gadget Service Elevation of Privilege Vulnerability
Necessary

Home windows Cross Gadget Service
CVE-2025-24076
Microsoft Home windows Cross Gadget Service Elevation of Privilege Vulnerability
Necessary

Home windows exFAT File System
CVE-2025-21180
Home windows exFAT File System Distant Code Execution Vulnerability
Necessary

Home windows Quick FAT Driver
CVE-2025-24985
Home windows Quick FAT File System Driver Distant Code Execution Vulnerability
Necessary

Home windows File Explorer
CVE-2025-24071
Microsoft Home windows File Explorer Spoofing Vulnerability
Necessary

Home windows Kernel Reminiscence
CVE-2025-24997
DirectX Graphics Kernel File Denial of Service Vulnerability
Necessary

Home windows Kernel-Mode Drivers
CVE-2025-24066
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Necessary

Home windows MapUrlToZone
CVE-2025-21247
MapUrlToZone Safety Function Bypass Vulnerability
Necessary

Home windows Mark of the Internet (MOTW)
CVE-2025-24061
Home windows Mark of the Internet Safety Function Bypass Vulnerability
Necessary

Home windows NTFS
CVE-2025-24993
Home windows NTFS Distant Code Execution Vulnerability
Necessary

Home windows NTFS
CVE-2025-24984
Home windows NTFS Data Disclosure Vulnerability
Necessary

Home windows NTFS
CVE-2025-24992
Home windows NTFS Data Disclosure Vulnerability
Necessary

Home windows NTFS
CVE-2025-24991
Home windows NTFS Data Disclosure Vulnerability
Necessary

Home windows NTLM
CVE-2025-24996
NTLM Hash Disclosure Spoofing Vulnerability
Necessary

Home windows NTLM
CVE-2025-24054
NTLM Hash Disclosure Spoofing Vulnerability
Necessary

Home windows Distant Desktop Companies
CVE-2025-24035
Home windows Distant Desktop Companies Distant Code Execution Vulnerability
Essential

Home windows Distant Desktop Companies
CVE-2025-24045
Home windows Distant Desktop Companies Distant Code Execution Vulnerability
Essential

Home windows Routing and Distant Entry Service (RRAS)
CVE-2025-24051
Home windows Routing and Distant Entry Service (RRAS) Distant Code Execution Vulnerability
Necessary

Home windows Subsystem for Linux
CVE-2025-24084
Home windows Subsystem for Linux (WSL2) Kernel Distant Code Execution Vulnerability
Essential

Home windows Telephony Server
CVE-2025-24056
Home windows Telephony Service Distant Code Execution Vulnerability
Necessary

Home windows USB Video Driver
CVE-2025-24988
Home windows USB Video Class System Driver Elevation of Privilege Vulnerability
Necessary

Home windows USB Video Driver
CVE-2025-24987
Home windows USB Video Class System Driver Elevation of Privilege Vulnerability
Necessary

Home windows USB Video Driver
CVE-2025-24055
Home windows USB Video Class System Driver Data Disclosure Vulnerability
Necessary

Home windows Win32 Kernel Subsystem
CVE-2025-24044
Home windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Necessary

Home windows Win32 Kernel Subsystem
CVE-2025-24983
Home windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Necessary