Microsoft Urges Immediate Patch for Six Critical Zero-Day Vulnerabilities Amid Windows 11 Upgrade Push

March 11, 2025
Microsoft Urges Immediate Patch for Six Critical Zero-Day Vulnerabilities Amid Windows 11 Upgrade Push
  • Users are strongly advised to ensure their software is up to date following this extensive patch release to mitigate security risks associated with outdated systems.

  • An estimated 240 million users may not have PCs capable of upgrading to Windows 11, potentially leaving them exposed to security risks after the deadline.

  • The U.S. cyber defense agency has emphasized the urgency of these updates, prompting users to either secure their systems or turn them off to avoid exploitation.

  • Microsoft's March 2025 Patch Tuesday updates addressed 56 Common Vulnerabilities and Exposures (CVEs), including seven zero-day vulnerabilities, six of which were actively exploited.

  • Among the updates, 12 significant flaws were identified, with six rated critical and another six already being exploited by cybercriminals, necessitating immediate attention from users.

  • As the October 14, 2025 deadline approaches, millions of Windows users remain on unsupported software that will not receive security updates, raising concerns about potential vulnerabilities.

  • Microsoft's security team has flagged several vulnerabilities, particularly in the Windows Subsystem for Linux, Windows DNS Server, and Microsoft Office, urging administrators to prioritize patches.

  • Among the 57 flaws, six are rated Critical, with notable vulnerabilities including CVE-2025-24985 and CVE-2025-24993 for remote code execution, emphasizing the need for swift action.

  • Despite the overall low count of vulnerabilities, the presence of six critical zero-days means that Windows users must prioritize these security updates without delay.

  • The recent removal of a support document for bypassing Windows 11's TPM 2.0 requirement indicates that Microsoft is tightening its stance on unsupported installations.

  • In addition to the zero-days, Microsoft highlighted the importance of addressing multiple critical-severity bugs that allow remote code execution, such as CVE-2025-26645 in the Remote Desktop Client.

  • Microsoft continues to encourage users to upgrade their hardware to benefit from enhanced security features in Windows 11, despite concerns over e-waste from obsolete devices.

Summary based on 15 sources


Get a daily email with more Tech stories

More Stories