# Microsoft addresses 57 security vulnerabilities

**URL:** <https://community.limacharlie.com/t/microsoft-addresses-57-security-vulnerabilities/128>\
**Category:** Community Intel\
**Created:** [March 12, 2025, 5:17pm UTC](https://community.limacharlie.com/t/microsoft-addresses-57-security-vulnerabilities/128 "2025-03-12T17:17:47Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![eric\_capuano](https://yyz1.discourse-cdn.com/flex033/user_avatar/community.limacharlie.com/eric_capuano/32/4_2.png) [@eric\_capuano](https://community.limacharlie.com/u/eric_capuano)\
**Post date:** [March 12, 2025, 5:17pm UTC](https://community.limacharlie.com/t/microsoft-addresses-57-security-vulnerabilities/128/1 "2025-03-12T17:17:47Z")

</div>

Busy day for Microsoft!

The six vulnerabilities that have come under active exploitation are listed below -

- **[CVE-2025-24983](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24983)** (CVSS score: 7.0) - A Windows Win32 Kernel Subsystem use-after-free (UAF) vulnerability that allows an authorized attacker to elevate privileges locally
- **[CVE-2025-24984](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24984)** (CVSS score: 4.6) - A Windows NTFS information disclosure vulnerability that allows an attacker with physical access to a target device and the ability to plug in a malicious USB drive to potentially read portions of heap memory
- **[CVE-2025-24985](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24985)** (CVSS score: 7.8) - An integer overflow vulnerability in Windows Fast FAT File System Driver that allows an unauthorized attacker to execute code locally
- **[CVE-2025-24991](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24991)** (CVSS score: 5.5) - An out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to disclose information locally
- **[CVE-2025-24993](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24993)** (CVSS score: 7.8) - A heap-based buffer overflow vulnerability in Windows NTFS that allows an unauthorized attacker to execute code locally
- **[CVE-2025-26633](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26633)** (CVSS score: 7.0) - An improper neutralization vulnerability in Microsoft Management Console that allows an unauthorized attacker to bypass a security feature locally

> **[URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited...](https://thehackernews.com/2025/03/urgent-microsoft-patches-57-security.html)**
>
> Microsoft fixes 57 security flaws, including six zero-days exploited in the wild. CISA mandates patches by April 1.