Monthly Fallout Report
March 2025 Fallout
57 vulnerabilities, 7 zero-days. Windows 11 KB5036721 caused widespread BSODs on enterprise systems.
Tired of patch chaos? Automox automates patching across Windows, Mac, and Linux — so you're never caught off guard on Patch Tuesday.
Try Free →Fallout Timeline
March 2025 brings 57 vulnerabilities including 7 zero-days and 6 criticals. The headline story is Windows 11 — KB5036721 is triggering BSODs on enterprise systems running certain security software. If you manage a Windows 11 fleet, test before you deploy widely. Hyper-V and Remote Desktop Services are also in the crosshairs this month.
Windows Fast FAT File System Driver Remote Code Execution — zero-day, actively exploited.
Microsoft Management Console Security Feature Bypass — zero-day, actively exploited.
Sources: r/sysadmin · BleepingComputer · MSRC
72 hours in and the BSOD reports on Windows 11 are the dominant story. Enterprise systems running third-party endpoint security software appear most affected by KB5036721. Authentication delays are being reported in Active Directory environments, and virtual machine application crashes are popping up in Server 2022 deployments. If you haven't deployed yet, hold and monitor.
- Windows 11 BSODs on enterprise systems after KB5036721 — particularly with third-party security software
- Windows 11 Authentication delays reported in AD environments
- Server 2022 Application crashes in virtual environments post-update
- Miscellaneous Isolated additional BSOD reports across various hardware
Sources: r/sysadmin · BleepingComputer
Two weeks out, the BSOD situation has improved significantly. Microsoft identified compatibility issues with certain endpoint security products and coordinated fixes. Most affected organizations were able to remediate by updating their security software before reapplying the Windows patch. No out-of-band update was required. Minor performance tweaks and compatibility resolutions round out the two-week picture.
Sources: r/sysadmin
Resources