Microsoft Fixes 58 Flaws Including Six Critical RCE Bugs and Actively Exploited Windows Issues

Microsoft released its March 2025 security updates to address 58 vulnerabilities across Windows, Office, Azure components, Visual Studio, and related enterprise software, including 23 remote code execution flaws and six critical vulnerabilities. The most severe issues affected Microsoft Office, Microsoft Dataverse, Windows Remote Desktop Services, Remote Desktop Client, Windows DNS, and Windows Subsystem for Linux 2, with impacts ranging from remote code execution to privilege escalation.

The update also remediated several vulnerabilities reported as actively exploited, including CVE-2025-24983 in the Windows Win32 Kernel Subsystem, alongside flaws in Microsoft Management Console, Windows NTFS, and the Windows Fast FAT File System Driver. Microsoft said the Dataverse issue CVE-2025-24053 was mitigated automatically and required no customer action, while defenders were urged to deploy the broader patch bundle promptly to reduce exposure across supported Windows client and server environments.