🚨 Patch Tuesday Alert: March 2025
Microsoft has fixed 57 vulnerabilities, including six zero-days, six critical and one more vulnerability has a publicly available proof of concept.
Third-party: web browsers, Android, VMware, Cisco, Paragon Partition Manager, Parallels Desktop, MongoDB, Ivanti, Citrix, Microsoft Bing & Power Pages, Juniper Networks, OpenSSH, Fortinet, and Progress Software LoadMaster.
Navigate to Vulnerability Digest from Action1 for comprehensive summary updated in real-time:
action1.com/patch-tuesday-ma…
🔎 Quick summary:
Windows: 57 vulnerabilities, six zero-days (CVE-2025-26633, CVE-2025-24993, CVE-2025-24991, CVE-2025-24985, CVE-2025-24984, and CVE-2025-24983), six critical and one vulnerability has a publicly available proof of concept.
Google Chrome: 14 vulnerabilities in version 136
Android: 43 vulnerabilities, including two zero-days CVE-2024-50302 and CVE-2024-43093
Mozilla Firefox: 25 vulnerabilities in version 136, with 18 high-risk memory-related flaws
VMware: three actively exploited zero-days—CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226
Cisco: Critical vulnerability in Webex for BroadWorks (unassigned CVE) exposing plaintext credentials
Paragon Partition Manager: Five vulnerabilities in the BioNTdrv.sys driver, including a zero-day (CVE-2025-0288)
Parallels Desktop: CVE-2024-34331 (privilege escalation), still unpatched with publicly available exploits
MongoDB: CVE-2024-53900 and CVE-2025-23061
Ivanti: CVE-2024-38657, CVE-2025-22467, CVE-2024-10644, and CVE-2024-47908
Citrix: CVE-2024-12284
Microsoft Bing & Power Pages: CVE-2025-21355 and CVE-2025-24989 (actively exploited)
Juniper Networks: CVE-2025-21589
OpenSSH: CVE-2025-26465 and CVE-2025-26466
Fortinet: CVE-2024-55591 and CVE-2025-24472 (actively exploited)
Progress Software LoadMaster: CVE-2024-56131 to CVE-2024-56135
More details:
action1.com/patch-tuesday/?v…