Microsoft March 2025 Patch Tuesday fixes 7 zero-days, 57 flaws

The number of bugs in each vulnerability category is listed below:

  • 23 Elevation of Privilege Vulnerabilities
  • 3 Security Feature Bypass Vulnerabilities
  • 23 Remote Code Execution Vulnerabilities
  • 4 Information Disclosure Vulnerabilities
  • 1 Denial of Service Vulnerabilities
  • 3 Spoofing Vulnerabilities

This month's Patch Tuesday fixes six actively exploited zero-days and one that was publicly exposed, for a total of seven zero-days.

Microsoft classifies a zero-day flaw as publicly disclosed or actively exploited while no official fix is available.

A few of the actively exploited zero days are related to Windows NTFS bugs that involve mounting VHD drives.