Microsoft · Security update · March 11, 2025
KB5053594: March 2025 cumulative update for Windows 10 1607
KB5053594, released March 11, 2025, fixes 35 CVEs across 4 products. 7 of them are being exploited (CVE-2025-24054); 7 on CISA KEV. Patch Radar priority: Patch now.
Patch now7 on CISA KEVKnown ransomware use
CVEs closed
35
5 rated Critical
Exploited
7
CVE-2025-24054
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.6227
99th percentile
Priority of the 35 CVEs
Patch now 7
Urgent 14
High 9
Routine 5
Applies to
| Product | Build after install |
|---|---|
| Windows 10 Version 1607 for 32-bit Systems | 14393.7876 |
| Windows 10 Version 1607 for x64-based Systems | 14393.7876 |
| Windows Server 2016 | 14393.7876 |
| Windows Server 2016 (Server Core installation) | 14393.7876 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-24054 | Windows NTLM | Spoofing | 6.5 | 0.6227 | KEVExploited |
| Patch now | CVE-2025-26633 | Microsoft Management Console | Security Feature Bypass | 7.0 | 0.3039 | KEVRansomwareExploited |
| Patch now | CVE-2025-24985 | Windows Fast FAT Driver | Remote Code Execution | 7.8 | 0.0389 | KEVExploited |
| Patch now | CVE-2025-24993 | Windows NTFS | Remote Code Execution | 7.8 | 0.0222 | KEVExploited |
| Patch now | CVE-2025-24991 | Windows NTFS | Information Disclosure | 5.5 | 0.0202 | KEVExploited |
| Patch now | CVE-2025-24984 | Windows NTFS | Information Disclosure | 4.6 | 0.0199 | KEVExploited |
| Patch now | CVE-2025-24983 | Windows Win32 Kernel Subsystem | Elevation of Privilege | 7.0 | 0.0187 | KEVExploited |
| Urgent | CVE-2024-49116 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.1028 | Exploitation Less Likely |
| Urgent | CVE-2025-26645 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0318 | Exploitation Less Likely |
| Urgent | CVE-2025-21247 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0305 | More likely |
| Urgent | CVE-2025-24035 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0172 | More likely |
| Urgent | CVE-2025-24045 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0133 | More likely |
| Urgent | CVE-2025-24064 | Role: DNS Server | Remote Code Execution | 8.1 | 0.0129 | Exploitation Less Likely |
| Urgent | CVE-2025-24061 | Windows Mark of the Web (MOTW) | Security Feature Bypass | 7.8 | 0.0121 | More likely |
| Urgent | CVE-2025-24992 | Windows NTFS | Information Disclosure | 5.5 | 0.0107 | More likely |
| Urgent | CVE-2025-21180 | Windows exFAT File System | Remote Code Execution | 7.8 | 0.0095 | More likely |
| Urgent | CVE-2025-24066 | Windows Kernel-Mode Drivers | Elevation of Privilege | 7.8 | 0.0071 | More likely |
| Urgent | CVE-2025-24067 | Microsoft Streaming Service | Elevation of Privilege | 7.8 | 0.0071 | More likely |
| Urgent | CVE-2025-24044 | Windows Win32 Kernel Subsystem | Elevation of Privilege | 7.8 | 0.0060 | More likely |
| Urgent | CVE-2025-24995 | Kernel Streaming WOW Thunk Service Driver | Elevation of Privilege | 7.8 | 0.0058 | More likely |
| Urgent | CVE-2024-9157 | Microsoft Windows | Elevation of Privilege | n/a | 0.0035 | More likely |
| High | CVE-2025-24056 | Windows Telephony Server | Remote Code Execution | 8.8 | 0.0158 | Exploitation Less Likely |
| High | CVE-2025-24051 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-30098 | Windows Cryptographic Services | Security Feature Bypass | 7.5 | 0.0125 | Exploitation Less Likely |
| High | CVE-2025-25008 | Microsoft Windows | Elevation of Privilege | 7.1 | 0.0061 | Exploitation Less Likely |
Showing 1 to 25 of 35
1Next