--- title: "Security digest: March 11, 2025" url: https://erroneo.us/security/2025-03-11/ description: "March 11, 2025 vulnerability digest: 6 CISA KEV additions (Microsoft); 1 critical advisory (Go). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2025-03-11 date_modified: 2025-03-11 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: March 11, 2025 6 known exploited (cisa kev) additions and 1 critical advisory. ## Take stock - Do you run any of these? Microsoft Windows. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-04-01. - Go: 1 critical advisory ( github.com/cheqd/cheqd-node ). Check with govulncheck ./... . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2025-26633](https://erroneo.us/security/cve/CVE-2025-26633/index.md) Microsoft Windows: Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability (CISA due 2025-04-01) - [CVE-2025-24993](https://erroneo.us/security/cve/CVE-2025-24993/index.md) Microsoft Windows: Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability (CISA due 2025-04-01) - [CVE-2025-24991](https://erroneo.us/security/cve/CVE-2025-24991/index.md) Microsoft Windows: Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability (CISA due 2025-04-01) - [CVE-2025-24985](https://erroneo.us/security/cve/CVE-2025-24985/index.md) Microsoft Windows: Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability (CISA due 2025-04-01) - [CVE-2025-24984](https://erroneo.us/security/cve/CVE-2025-24984/index.md) Microsoft Windows: Microsoft Windows NTFS Information Disclosure Vulnerability (CISA due 2025-04-01) - [CVE-2025-24983](https://erroneo.us/security/cve/CVE-2025-24983/index.md) Microsoft Windows: Microsoft Windows Win32k Use-After-Free Vulnerability (CISA due 2025-04-01) ## Critical advisories - [GHSA-33cr-m232-xqch](https://erroneo.us/security/ghsa/GHSA-33cr-m232-xqch/index.md) cheqd-node affected by Non-deterministic JSON Unmarshalling of IBC Acknowledgement — Go github.com/cheqd/cheqd-node < 3.1.7 → 3.1.7 --- Source page: https://erroneo.us/security/2025-03-11/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt