Skip to the content
The Update Bureau
Security

KB5053594: all 34 vulnerabilities

Cumulative update for Windows Server, version 2016, March 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

34 vulnerabilities fixed
6 exploited 5 critical 29 important
VulnerabilitySeverityCVSS
CVE-2025-24985 Exploited
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-24993 Exploited
Windows NTFS Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-24983 Exploited
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-26633 Exploited
Microsoft Management Console Security Feature Bypass Vulnerability
 Important 7.0
CVE-2025-24991 Exploited
Windows NTFS Information Disclosure Vulnerability
 Important 5.5
CVE-2025-24984 Exploited
Windows NTFS Information Disclosure Vulnerability
 Important 4.6
CVE-2025-26645
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2024-49116
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-24035
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-24045
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-24064
Windows Domain Name Service Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-24051
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-24056
Windows Telephony Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-21180
Windows exFAT File System Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-24044
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-24046
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-24048
Windows Hyper-V Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-24050
Windows Hyper-V Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-24059
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-24061
Windows Mark of the Web Security Feature Bypass Vulnerability
 Important 7.8
CVE-2025-24066
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-24067
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-24072
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-24995
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-25008
Windows Server Elevation of Privilege Vulnerability
 Important 7.1
CVE-2025-24987
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.6
CVE-2025-24988
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
 Important 6.6
CVE-2025-24054
NTLM Hash Disclosure Spoofing Vulnerability
 Important 6.5
CVE-2025-24071
Microsoft Windows File Explorer Spoofing Vulnerability
 Important 6.5
CVE-2025-24996
NTLM Hash Disclosure Spoofing Vulnerability
 Important 6.5
CVE-2025-24992
Windows NTFS Information Disclosure Vulnerability
 Important 5.5
CVE-2025-21247
MapUrlToZone Security Feature Bypass Vulnerability
 Important 4.3
CVE-2025-24055
Windows USB Video Class System Driver Information Disclosure Vulnerability
 Important 4.3
CVE-2024-9157
Synaptics: CVE-2024-9157 Synaptics Service Binaries DLL Loading Vulnerability
 Important —