Patch Tuesday includes six actively exploited zero-day vulnerabilities. Learn about the critical vulnerabilities and why immediate updates are essential.

Compared to past months, the number of security fixes released for March is down, but that doesn’t mean IT admins won’t be busy.

The first is CVE-2025-24993 - a heap-based buffer overflow in NTFS used by Windows Server 2008 and later systems, as well as Windows 10 and 11. The flaw makes remote code execution (RCE) a possibility and is fairly simple to exploit, Redmond warns.

Microsoft released patches for 57 security flaws, six of which are already being exploited, while cybersecurity experts describe another six as critical.

Patch Tuesday update for Windows 11 bring the ability to share files directly from a jump list on the taskbar, Windows Spotlight improvements, and more.

Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been exploited in attacks since March 2023.

ESET, a Slovak cybersecurity company, has reported that a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been exploited in attacks since March 2023. The vulnerability,

Today is Microsoft's March 2025 Patch Tuesday, which includes security updates for 57 flaws, including six actively exploited zero-day vulnerabilities.