Microsoft · Security update · March 11, 2025
KB5053887: March 2025 security update
KB5053887, released March 11, 2025, fixes 26 CVEs across 2 products. 7 of them are being exploited (CVE-2025-24054); 7 on CISA KEV. Patch Radar priority: Patch now.
Patch now7 on CISA KEVKnown ransomware use
CVEs closed
26
4 rated Critical
Exploited
7
CVE-2025-24054
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.6227
99th percentile
Priority of the 26 CVEs
Patch now 7
Urgent 9
High 5
Routine 5
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-24054 | Windows NTLM | Spoofing | 6.5 | 0.6227 | KEVExploited |
| Patch now | CVE-2025-26633 | Microsoft Management Console | Security Feature Bypass | 7.0 | 0.3039 | KEVRansomwareExploited |
| Patch now | CVE-2025-24985 | Windows Fast FAT Driver | Remote Code Execution | 7.8 | 0.0389 | KEVExploited |
| Patch now | CVE-2025-24993 | Windows NTFS | Remote Code Execution | 7.8 | 0.0222 | KEVExploited |
| Patch now | CVE-2025-24991 | Windows NTFS | Information Disclosure | 5.5 | 0.0202 | KEVExploited |
| Patch now | CVE-2025-24984 | Windows NTFS | Information Disclosure | 4.6 | 0.0199 | KEVExploited |
| Patch now | CVE-2025-24983 | Windows Win32 Kernel Subsystem | Elevation of Privilege | 7.0 | 0.0187 | KEVExploited |
| Urgent | CVE-2025-26645 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0318 | Exploitation Less Likely |
| Urgent | CVE-2025-21247 | Windows MapUrlToZone | Security Feature Bypass | 4.3 | 0.0305 | More likely |
| Urgent | CVE-2025-24035 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0172 | More likely |
| Urgent | CVE-2025-24045 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0133 | More likely |
| Urgent | CVE-2025-24064 | Role: DNS Server | Remote Code Execution | 8.1 | 0.0129 | Exploitation Less Likely |
| Urgent | CVE-2025-24992 | Windows NTFS | Information Disclosure | 5.5 | 0.0107 | More likely |
| Urgent | CVE-2025-21180 | Windows exFAT File System | Remote Code Execution | 7.8 | 0.0095 | More likely |
| Urgent | CVE-2025-24044 | Windows Win32 Kernel Subsystem | Elevation of Privilege | 7.8 | 0.0060 | More likely |
| Urgent | CVE-2024-9157 | Microsoft Windows | Elevation of Privilege | n/a | 0.0035 | More likely |
| High | CVE-2025-24056 | Windows Telephony Server | Remote Code Execution | 8.8 | 0.0158 | Exploitation Less Likely |
| High | CVE-2025-24051 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-30098 | Windows Cryptographic Services | Security Feature Bypass | 7.5 | 0.0125 | Exploitation Less Likely |
| High | CVE-2025-24059 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0054 | Exploitation Less Likely |
| High | CVE-2025-24072 | Microsoft Local Security Authority Server (lsasrv) | Elevation of Privilege | 7.8 | 0.0054 | Exploitation Less Likely |
| Routine | CVE-2025-24071 | Windows File Explorer | Spoofing | 6.5 | 0.2333 | Exploitation Less Likely |
| Routine | CVE-2025-24996 | Windows NTLM | Spoofing | 6.5 | 0.0134 | Exploitation Less Likely |
| Routine | CVE-2025-24055 | Windows USB Video Driver | Information Disclosure | 4.3 | 0.0086 | Exploitation Less Likely |
| Routine | CVE-2025-24987 | Windows USB Video Driver | Elevation of Privilege | 6.6 | 0.0068 | Exploitation Less Likely |
Showing 1 to 25 of 26
1Next