Among the critical vulnerabilities are CVE-2025-24035 and CVE-2025-24045, both Remote Code Execution (RCE) vulnerabilities in Windows Remote Desktop Services (RDS). Microsoft has released its March security update, addressing 57 vulnerabilities across its product range, including six critical flaws. Successful exploitation of these vulnerabilities could allow an unauthorized attacker to execute code over a network, potentially leading to complete system compromise with high-severity impacts on system confidentiality, integrity, and availability. Windows Remote Desktop Services enables users to remotely access Windows applications and desktops from different devices via a network connection. These include vulnerabilities in Microsoft Management Console, Windows NTFS, and Windows Fast FAT system drivers. Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis. The vulnerability affects multiple Windows server and desktop versions, making it a widespread risk. Microsoft has released patches for these vulnerabilities as part of its March Patch Tuesday update7. Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. CVE-2025-24045 is a more complex vulnerability to exploit, requiring an attacker to win a race condition.
This Cyber News was published on cybersecuritynews.com. Publication date: Wed, 12 Mar 2025 12:05:20 +0000