Patch Tuesday (Expel’s version): March 2025

This Patch Tuesday report highlights six Microsoft fixes being actively exploited and focuses on Adobe ColdFusion vulnerabilities that have been used in real incidents — including CVE-2023-26360 which enabled arbitrary code execution and led to class-file writes compromising about 20 servers, and CVE-2018-15961 used to upload webshells; the report cites CISA KEV and GreyNoise data showing ongoing exploitation and urges immediate patching and perimeter hardening.