Microsoft and Adobe Patch Tuesday, March 2025 Security Update Review

**March 2025 Patch Tuesday:** Microsoft addressed 67 vulnerabilities (including six critical) and seven zero-days—six of which are reported as actively exploited—across products such as Remote Desktop Services, Win32 kernel, NTFS, WSL, DNS Server and more; Adobe released advisories for 38 vulnerabilities affecting Acrobat Reader and several Substance/Creative apps. CISA has added multiple CVEs to its Known Exploited Vulnerabilities catalog with patching guidance, and the report includes Qualys detection QQL, Policy Compliance controls, and mitigation options (including TruRisk Eliminate) to reduce risk prior to patch deployment.