Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-9157 | ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized… | 7.8 | <1% | ||
CVE-2025-26645+4 related CVEs | Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network | 8.8 group max | 3% | ||
| CVE-2025-24057 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally | 7.8 | <1% | ||
| CVE-2025-24064 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network | 8.1 | 1% | ||
| CVE-2025-24084 | Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally | 8.4 | <1% | ||
| CVE-2025-24985 | Local Code Execution via Integer Overflow in Microsoft Windows Fast FAT Driver | 7.8 group max | 4% | KEVPoC | KEV |
From the original article
3 min read at blog.talosintelligence.com
Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as “critical”. There are six vulnerabilities that Microsoft has observed being exploited in the wild. CVE-2025-26633 is a Remoted Code Execution (RCE) vulnerability in Microsoft’s Management Console.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.