Skip to the content
The Update Bureau
Windows Server 2019 Windows Server 2019 Security update
Patch Tuesday Zero-day

KB5053596

KB5053596: Cumulative update for Windows Server, version 2019, March 2025. Exploited file-system flaws patched; SSH startup fixed

In short

The update fixes 33 vulnerabilities, including five exploited flaws in Windows file systems and the Microsoft Management Console, and restores OpenSSH service startup. It is no longer available from Microsoft’s release channels.

Does it affect you? Applies to: Devices running Windows Server 2019. The listed Citrix installation issue is expected to affect a limited number of organizations; home users are not expected to be affected.

Build
17763.7009
Security
33 fixed · 5 critical · 5 exploited

Microsoft publishes separate notes for this KB for Windows 10.

What changes

Improvements 3 changes

Daylight saving time (DST)

  • The time change rules for Paraguay are updated.1

Temporary files

For: Applications and system processes that store temporary files

  • System processes can store temporary files in a secure directory, reducing the risk of unauthorized access.2
    System processes can use C:\Windows\SystemTemp through the GetTempPath2 API or .NET's GetTempPath API.

Servicing stack

  • The servicing stack, which installs Windows updates, receives quality improvements.3
    The update combines servicing stack update KB5054007 (build 17763.7000) with the latest cumulative update.

Fix 1 change

Open Secure Shell (OpenSSH)

  • The OpenSSH service starts properly, so SSH connections are no longer stopped by this startup issue.4
    Fixes the issue where the sshd.exe process had to be run manually and detailed logging was unavailable.

New feature 1 change

GB18030-2022

  • Support is added for the GB18030-2022 amendment.5

Known issues

  1. Open Affects: Organizations and IT administrators

    Citrix

    Devices with Citrix Session Recording Agent version 2411 might fail to complete installation of the January 2025 Windows security update. During restart, the installation can be undone. The issue is expected to affect a limited number of organizations; home users are not expected to be affected.6

    How to apply the workaround Workaround

    Citrix says the issue is resolved in Session Recording Agent version 2503 or newer.6

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-03-11
Type
Cumulative update
VersionBuildChannel
2019 17763.7009 General availability

Security

33 vulnerabilities fixed
5 exploited 5 critical 28 important
VulnerabilitySeverityCVSS
CVE-2025-24985 Exploited
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-24993 Exploited
Windows NTFS Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-26633 Exploited
Microsoft Management Console Security Feature Bypass Vulnerability
 Important 7.0
CVE-2025-24991 Exploited
Windows NTFS Information Disclosure Vulnerability
 Important 5.5
CVE-2025-24984 Exploited
Windows NTFS Information Disclosure Vulnerability
 Important 4.6
CVE-2025-26645
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2024-49116
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-24035
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-24045
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-24064
Windows Domain Name Service Remote Code Execution Vulnerability
 Critical 8.1

The table lists the 10 exploited, publicly disclosed or critical vulnerabilities. See all 33 vulnerabilities →

Sources

Updated
Cited passages from Microsoft's official notes (6)
  1. 1. [Daylight saving time (DST)] Updated: DST changes for Paraguay. For more information, see the Daylight Saving Time & Time Zone Blog. support.microsoft.com
  2. 2. [Temporary files] This update enables system processes to store temporary files in a secure directory "C:\Windows\SystemTemp" via either calling GetTempPath2 API or using .NET's GetTempPath API, thereby reducing the risk of unauthorized access. support.microsoft.com
  3. 3. Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). support.microsoft.com
  4. 4. [Open Secure Shell (OpenSSH) (known issue)] Fixed: The service fails to start, which stops SSH connections. There is no detailed logging, and you must run the sshd.exe process manually. support.microsoft.com
  5. 5. [GB18030-2022] This update adds support for this amendment. support.microsoft.com
  6. 6. The issue has been resolved in Citrix Session Recording Agent version 2503, released on April 28, 2025, and newer versions. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Nov 8, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake