Microsoft and Adobe Patch Tuesday, March 2025 Security Update Review

March 2025 Patch Tuesday is here, and Microsoft has rolled out critical security updates that address multiple vulnerabilities across its product suite. Here’s a quick breakdown of what you need to know. Microsoft Patch Tuesday for March 2025 Microsoft Patch's Tuesday, March 2025 edition addresse...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure products. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges or execute arbitrary code with the privileges of the vulnerable application. Azure PromptFlow:...

CVE-2025-24070

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:44:07+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0079 2025-03-11 18:42:19+00:00| seen|...

CVE-2025-24988

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 18:42:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7215 2025-03-11 20:06:19+00:00| seen|...

CVE-2025-24987

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 18:42:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7214 2025-03-11 20:06:15+00:00| seen|...

CVE-2024-9157

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 16:40:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7161 2025-03-11 17:54:01+00:00| seen|...

CVE-2025-25003

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:44:07+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0079 2025-03-11 20:06:21+00:00| seen|...

CVE-2025-24035

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:40:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114145022545782390 2025-03-11 17:48:34+00:00| seen|...

CVE-2025-26645

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:23:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144954235534498 2025-03-11 17:40:22+00:00| seen|...

CVE-2025-24071

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-18 14:51:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/20343 2025-03-18 16:26:06+00:00| published-proof-of-concept|...

CVE-2025-24993

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:09:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144902283889820 2025-03-11 17:39:51+00:00| seen|...

March 11, 2025—KB5053888 (Monthly Rollup)

None None...

March 11, 2025—Hotpatch KB5053636 (OS Build 26100.3403)

None None...

KB5053593: Cumulative security update for Internet Explorer: March 11, 2025

None None...

Security Updates for Microsoft Word Products (March 2025)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

PT-2025-10848

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the patch released in March 2025. Description A security feature bypass vulnerability exists in Microsoft Management Console MMC. This vulnerability, also known as MSC EvilTwin CVE-2025-26633, allows an...

About the security content of iOS 18.3.2 and iPadOS 18.3.2

About the security content of iOS 18.3.2 and iPadOS 18.3.2 This document describes the security content of iOS 18.3.2 and iPadOS 18.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of macOS Sequoia 15.3.2

About the security content of macOS Sequoia 15.3.2 This document describes the security content of macOS Sequoia 15.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Security Updates for Microsoft Office Online Server (March 2025)

The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

About the security content of visionOS 2.3.2

About the security content of visionOS 2.3.2 This document describes the security content of visionOS 2.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...