CyberzSOC

Among the critical vulnerabilities are CVE-2025-24035 and CVE-2025-24045, both Remote Code Execution (RCE) vulnerabilities in Windows Remote Desktop Services (RDS). Each vulnerability has been assigned a CVSSv3 score of 8.1 and is rated as critical [1]. It is recommended updating affected assets as soon as possible. The vulnerability CVE-2025-24035 is caused by sensitive data storage in improperly locked memory and CVE-2025-24045 is a more complex vulnerability to exploit, requiring an attacker Successful exploitation of these vulnerabilities could allow an unauthorised attacker to execute Microsoft has addressed 57 vulnerabilities in its products as part of the March 2025 Patch The following products are affected by CVE-2025-24035 [3]: The following products are affected by CVE-2025-24045 [4]: CERT-EU recommends updating the affected products as soon as possible to the latest version, prioritising Internet facing applications.