Alert GCSA-25034 - Microsoft Monthly Security Update - marzo 2025
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
******************************************************************
alert ID: GCSA-25034
data: 12 marzo 2025
titolo: Microsoft Monthly Security Update - marzo 2025
******************************************************************
:: Descrizione del problema
Microsoft ha pubblicato il security update per il mese di marzo 2025.
Con questa release vengono risolte 57 vulnerabilita',
delle quali 6 sono di tipo zero-day ed in corso di sfruttamento:
CVE-2025-24983 (CVSS 7.0) Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24983
CVE-2025-24984 (CVSS 4.6) Windows NTFS Information Disclosure Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24984
CVE-2025-24985 (CVSS 7.8) Windows Fast FAT File System Driver Remote Code Execution Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24985
CVE-2025-24991 (CVSS 5.5) Windows NTFS Information Disclosure Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24991
CVE-2025-24993 (CVSS 7.8) Windows NTFS Remote Code Execution Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24993
CVE-2025-26633 (CVSS 7.0) Microsoft Management Console Security Feature Bypass Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-26633
Maggiori dettagli sono disponibili alla sezione "Riferimenti".
:: Software / Tecnologie interessate
Windows
Microsoft Office
Azure
Extended Security Updates (ESU)
Developer Tools
Browser
:: Impatto
Denial of Service (DoS)
Esecuzione remota di codice arbitrario (RCE)
Acquisizione di privilegi piu' elevati (EoP)
Bypass delle funzionalita' di sicurezza (SFB)
Rivelazione di informazioni (ID)
Spoofing (Provide Misleading Information)
:: Soluzioni
In Windows per default gli aggiornamenti avvengono in maniera automatica.
Per verificare manualmente la disponibilita' di aggiornamenti scegliere
Start > Impostazioni > Aggiornamento e Sicurezza > Windows Update
Verificare di aver installato la versione piu' recente del
Servicing Stack Updates
https://msrc.microsoft.com/update-guide/vulnerability/ADV990001
https://docs.microsoft.com/it-it/windows/deployment/update/servicing-stack-updates
MSRC Security Update Guide
https://msrc.microsoft.com/update-guide/deployments
Windows Update domande frequenti
https://support.microsoft.com/en-us/help/12373/windows-update-faq
Gli aggiornamenti sono disponibili anche tramite il catalogo di Microsoft Update
https://www.catalog.update.microsoft.com/Search.aspx?q=2025%20Security%20Updates%20
:: Riferimenti
Microsoft Security Updates - Release Notes
https://msrc.microsoft.com/update-guide/releaseNote/2025-Mar
https://msrc.microsoft.com/update-guide
Microsoft Security Update Guidance
https://portal.msrc.microsoft.com/en-us/security-guidance
BleepingComputer
https://www.bleepingcomputer.com/news/microsoft/microsoft-march-2025-patch-tuesday-fixes-7-zero-days-57-flaws/
https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-windows-kernel-zero-day-exploited-since-2023/
Krebs on Security
https://krebsonsecurity.com/2025/03/microsoft-6-zero-days-in-march-2025-patch-tuesday/
SANS Internet Storm Center
https://isc.sans.edu/diary/rss/31756
SecurityWeek
https://www.securityweek.com/patch-tuesday-microsoft-patches-57-flaws-flags-six-active-zero-days/
https://www.securityweek.com/newly-patched-windows-zero-day-exploited-for-two-years/
The Hacker News
https://thehackernews.com/2025/03/urgent-microsoft-patches-57-security.html
Cyber Security News
https://cybersecuritynews.com/microsoft-march-2025-patch-tuesday/
https://cybersecuritynews.com/cisa-warns-of-microsoft-windows-management-console-mmc-vulnerability/
https://cybersecuritynews.com/windows-remote-desktop-services-code-vulnerability/
https://cybersecuritynews.com/cisa-warns-of-windows-ntfs-vulnerability-exploited/
Mitre CVE
I riferimenti CVE sono disponibili nell'advisory originale.
GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZ9Hr2A0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCIKMAn1hQAjuSkGqZScoaCXJn6iFe3HbSAJ4vHq5LLVXo
rFWASUGUH6yxC0Knkg==
=roup
-----END PGP SIGNATURE-----
Hash: SHA256
******************************************************************
alert ID: GCSA-25034
data: 12 marzo 2025
titolo: Microsoft Monthly Security Update - marzo 2025
******************************************************************
:: Descrizione del problema
Microsoft ha pubblicato il security update per il mese di marzo 2025.
Con questa release vengono risolte 57 vulnerabilita',
delle quali 6 sono di tipo zero-day ed in corso di sfruttamento:
CVE-2025-24983 (CVSS 7.0) Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24983
CVE-2025-24984 (CVSS 4.6) Windows NTFS Information Disclosure Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24984
CVE-2025-24985 (CVSS 7.8) Windows Fast FAT File System Driver Remote Code Execution Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24985
CVE-2025-24991 (CVSS 5.5) Windows NTFS Information Disclosure Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24991
CVE-2025-24993 (CVSS 7.8) Windows NTFS Remote Code Execution Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24993
CVE-2025-26633 (CVSS 7.0) Microsoft Management Console Security Feature Bypass Vulnerability
http://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-26633
Maggiori dettagli sono disponibili alla sezione "Riferimenti".
:: Software / Tecnologie interessate
Windows
Microsoft Office
Azure
Extended Security Updates (ESU)
Developer Tools
Browser
:: Impatto
Denial of Service (DoS)
Esecuzione remota di codice arbitrario (RCE)
Acquisizione di privilegi piu' elevati (EoP)
Bypass delle funzionalita' di sicurezza (SFB)
Rivelazione di informazioni (ID)
Spoofing (Provide Misleading Information)
:: Soluzioni
In Windows per default gli aggiornamenti avvengono in maniera automatica.
Per verificare manualmente la disponibilita' di aggiornamenti scegliere
Start > Impostazioni > Aggiornamento e Sicurezza > Windows Update
Verificare di aver installato la versione piu' recente del
Servicing Stack Updates
https://msrc.microsoft.com/update-guide/vulnerability/ADV990001
https://docs.microsoft.com/it-it/windows/deployment/update/servicing-stack-updates
MSRC Security Update Guide
https://msrc.microsoft.com/update-guide/deployments
Windows Update domande frequenti
https://support.microsoft.com/en-us/help/12373/windows-update-faq
Gli aggiornamenti sono disponibili anche tramite il catalogo di Microsoft Update
https://www.catalog.update.microsoft.com/Search.aspx?q=2025%20Security%20Updates%20
:: Riferimenti
Microsoft Security Updates - Release Notes
https://msrc.microsoft.com/update-guide/releaseNote/2025-Mar
https://msrc.microsoft.com/update-guide
Microsoft Security Update Guidance
https://portal.msrc.microsoft.com/en-us/security-guidance
BleepingComputer
https://www.bleepingcomputer.com/news/microsoft/microsoft-march-2025-patch-tuesday-fixes-7-zero-days-57-flaws/
https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-windows-kernel-zero-day-exploited-since-2023/
Krebs on Security
https://krebsonsecurity.com/2025/03/microsoft-6-zero-days-in-march-2025-patch-tuesday/
SANS Internet Storm Center
https://isc.sans.edu/diary/rss/31756
SecurityWeek
https://www.securityweek.com/patch-tuesday-microsoft-patches-57-flaws-flags-six-active-zero-days/
https://www.securityweek.com/newly-patched-windows-zero-day-exploited-for-two-years/
The Hacker News
https://thehackernews.com/2025/03/urgent-microsoft-patches-57-security.html
Cyber Security News
https://cybersecuritynews.com/microsoft-march-2025-patch-tuesday/
https://cybersecuritynews.com/cisa-warns-of-microsoft-windows-management-console-mmc-vulnerability/
https://cybersecuritynews.com/windows-remote-desktop-services-code-vulnerability/
https://cybersecuritynews.com/cisa-warns-of-windows-ntfs-vulnerability-exploited/
Mitre CVE
I riferimenti CVE sono disponibili nell'advisory originale.
GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZ9Hr2A0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCIKMAn1hQAjuSkGqZScoaCXJn6iFe3HbSAJ4vHq5LLVXo
rFWASUGUH6yxC0Knkg==
=roup
-----END PGP SIGNATURE-----