The Microsoft March 2025 security updates have been released and consist of 56 new CVEs to Microsoft products.
Of the Microsoft CVEs released, 6 are rated critical and 50 are rated important in security. At the time of release, one is listed as being publicly known and six under active attack.
The security updates apply to the following products, features and roles: Windows and Windows Components, Office and Office Components, Azure, .NET and Visual Studio, Remote Desktop Services, DNS Server, and Hyper-V Serve.
See the list of KBs at the bottom of the page at March 2025 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates.
Recommended Reading: See Dustin Childs review and analysis in Zero Day Initiative -- The March 2025 Security Update Review.
Additional Update Notes:
- Windows 10 End of Support -- On October 14, 2025, Windows 10 will reach end of support. See the Windows 10 blog for How to prepare for Windows 10 end of support by moving to Windows 11 today.
- MSRT -- The Malicious Software Removal Tool is now run on a quarterly basis rather than monthly. See Remove specific prevalent malware with Windows Malicious Software Removal Tool.
- Servicing Stack Updates -- Microsoft now combines the latest servicing stack update (SSU) for your operating system with the Latest Cumulative Updates (LCU). For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
- Windows updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows, in addition to non-security updates. The updates are also available via search for the KB number in the Microsoft Update Catalog.
- For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see Windows 10 Home and Pro and Windows 11 Home and Pro.
- Windows Update History: Windows 11
References
No comments:
Post a Comment