What is the zero-day vulnerability in the July 2025 Microsoft update?

CVE-2025-49719 (CVSS score 7.5) is a Microsoft SQL Server Information Disclosure Vulnerability that was publicly disclosed as a zero-day. It's an information disclosure flaw that allows remote, unauthenticated attackers to access uninitialized memory due to improper input validation, affecting multiple SQL Server versions from 2016 through 2022.

Which vulnerabilities have the highest priority for patching in July 2025?

The highest priority vulnerabilities include CVE-2025-47981 (CVSS 9.8) SPNEGO Extended Negotiation Remote Code Execution Vulnerability, which Microsoft has marked as 'More Likely' to be exploited within 30 days, and CVE-2025-49704 (CVSS 8.8) Microsoft SharePoint Remote Code Execution Vulnerability. Multiple Office and SQL Server remote code execution vulnerabilities also require immediate attention.

How many critical vulnerabilities are included in the July 2025 Microsoft update?

The July 2025 update includes 14 critical-severity vulnerabilities. The most severe is CVE-2025-47981 with a CVSS score of 9.8, followed by vulnerabilities in SharePoint, Office products, SQL Server, and Windows components with CVSS scores ranging from 8.1 to 8.8.

What types of vulnerabilities are addressed in the July 2025 Microsoft update?

The vulnerability distribution includes: 53 elevation of privilege vulnerabilities, 41 remote code execution vulnerabilities, 18 information disclosure vulnerabilities, 8 security feature bypass vulnerabilities, 6 denial of service vulnerabilities, and 4 spoofing vulnerabilities across the 130 total vulnerabilities addressed.

Which Microsoft products should receive immediate attention for July 2025 patches?

Systems running SQL Server, Office products, SharePoint, and Windows domain controllers should receive immediate attention. The patch deployment should be prioritized based on the criticality of the vulnerabilities and the organization's exposure, with particular focus on internet-facing and VPN-accessible systems.

What makes CVE-2025-47981 particularly dangerous in the July 2025 update?

CVE-2025-47981 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability with a CVSS score of 9.8. Microsoft has marked this vulnerability as 'More Likely' to be exploited within 30 days, making it the highest priority vulnerability in this update cycle.

How serious are the Office vulnerabilities in the July 2025 Microsoft update?

The July 2025 update includes multiple critical Office vulnerabilities with CVSS scores of 8.4 to 8.8, including CVE-2025-49695, CVE-2025-49696, CVE-2025-49697, CVE-2025-49698, CVE-2025-49702, and CVE-2025-49703. These are all remote code execution vulnerabilities affecting various Office applications including Word and general Office components.

What SQL Server vulnerabilities are addressed in the July 2025 update?

The update addresses three SQL Server vulnerabilities: CVE-2025-49719 (CVSS 7.5) - the publicly disclosed zero-day information disclosure vulnerability, CVE-2025-49718 (Information Disclosure), and CVE-2025-49717 (CVSS 8.5) - a critical remote code execution vulnerability. SQL Server versions from 2016 through 2022 are affected.

Are there any AMD processor vulnerabilities in the July 2025 Microsoft update?

Yes, the update addresses two AMD processor vulnerabilities: CVE-2025-36350 (CVSS 5.6) - AMD Transient Scheduler Attack in Store Queue, and CVE-2025-36357 (CVSS 5.6) - AMD Transient Scheduler Attack in L1 Data Queue. Both are classified as critical despite their moderate CVSS scores.

What SharePoint vulnerabilities need immediate attention in July 2025?

SharePoint vulnerabilities include CVE-2025-49704 (CVSS 8.8) - a critical SharePoint Remote Code Execution Vulnerability, CVE-2025-49701 - another SharePoint Remote Code Execution Vulnerability, and CVE-2025-49706 - a SharePoint Server Spoofing Vulnerability. The first two are particularly critical and require immediate patching.

How should organizations prioritize the July 2025 Microsoft security updates?

Organizations should prioritize based on: 1) CVE-2025-47981 (SPNEGO) marked as 'More Likely' to be exploited, 2) Internet-facing systems running SQL Server, SharePoint, and Office products, 3) Domain controllers and VPN-accessible systems, 4) Systems with the highest CVSS scores (9.8, 8.8, 8.6, 8.5), and 5) The publicly disclosed SQL Server zero-day vulnerability.

What Windows core system vulnerabilities are addressed in July 2025?

Key Windows vulnerabilities include CVE-2025-48822 (CVSS 8.6) - Windows Hyper-V Remote Code Execution Vulnerability, CVE-2025-49735 (CVSS 8.1) - Windows KDC Proxy Service Remote Code Execution Vulnerability, CVE-2025-47980 (CVSS 6.2) - Windows Imaging Component Information Disclosure Vulnerability, and multiple elevation of privilege vulnerabilities across various Windows components.

Are there any Visual Studio vulnerabilities in the July 2025 update?

Yes, the update addresses multiple Visual Studio vulnerabilities including CVE-2025-49739 - Visual Studio Elevation of Privilege Vulnerability, CVE-2025-49714 - Visual Studio Code Python Extension Remote Code Execution Vulnerability, and several Git-related vulnerabilities (CVE-2025-27614, CVE-2025-27613, CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48386, CVE-2025-48385).

What immediate actions should organizations take for the July 2025 Microsoft updates?

Organizations should: 1) Immediately patch CVE-2025-47981 (SPNEGO) due to high exploitation likelihood, 2) Prioritize SQL Server, SharePoint, and Office systems, 3) Focus on internet-facing and VPN-accessible systems first, 4) Test and deploy patches for domain controllers, 5) Monitor for exploitation attempts, especially for the publicly disclosed SQL Server zero-day, and 6) Implement additional monitoring for critical systems until patches are fully deployed.

Why is the SQL Server zero-day particularly concerning?

CVE-2025-49719 is concerning because it's a publicly disclosed zero-day affecting SQL Server versions from 2016 through 2022, allowing remote, unauthenticated attackers to access uninitialized memory. While Microsoft assesses exploitation as 'Less Likely', security researchers warn that the public disclosure of technical details could lead to increased exploitation attempts over time.

What BitLocker vulnerabilities are addressed in the July 2025 update?

The update addresses five BitLocker Security Feature Bypass Vulnerabilities: CVE-2025-48818, CVE-2025-48001, CVE-2025-48804, CVE-2025-48003, and CVE-2025-48800. These vulnerabilities could potentially allow attackers to bypass BitLocker encryption protections and should be prioritized for systems relying on BitLocker for data protection.

Are there any Teams vulnerabilities in the July 2025 Microsoft update?

Yes, the update addresses two Microsoft Teams Elevation of Privilege Vulnerabilities: CVE-2025-49731 and CVE-2025-49737. While these are classified as 'Important' rather than 'Critical', organizations using Teams should prioritize these patches to prevent potential privilege escalation attacks.

What is the overall security impact of the July 2025 Microsoft Patch Tuesday?

The July 2025 Patch Tuesday represents a significant security update with 130 vulnerabilities including one zero-day and 14 critical vulnerabilities. The high number of remote code execution vulnerabilities (41) and the presence of a vulnerability marked as 'More Likely' to be exploited make this a high-priority update cycle requiring immediate attention from IT administrators and security teams.

Advisory

Microsoft releases July 2025 Patch fixing one critical zero-day, 129 other flaws

Q: Are there any known active exploits for the July 2025 Microsoft vulnerabilities?

Microsoft reports that there are no known active exploits for any of the vulnerabilities addressed in this release. However, given the critical severity and high exploitability ratings of several vulnerabilities, users are advised to apply updates immediately, especially for internet-facing, VPN-accessible, and domain-connected systems.

published: July 8, 2025

Take action: This month prioritize patching of Microsoft Office, SQL Server, SharePoint, and Windows domain controllers. Those are impacted by the critical issues. Don't forget to update your Windows PCs/Laptops, since we all use them on the internet and this list of flaws will be abused by hackers.

Learn More

Microsoft released the July 2025 Patch Tuesday security updates addressing a total of 130 vulnerabilities across its software ecosystem. The security update includes one publicly disclosed zero-day vulnerability in Microsoft SQL Server, and additional 14 critical-severity vulnerabilities.

Zero day vulnerability

CVE-2025-49719 (CVSS score 7.5) - Microsoft SQL Server Information Disclosure Vulnerability- Publicly disclosed zero-day. It's an information disclosure flaw in Microsoft SQL Server that allows remote, unauthenticated attackers to access uninitialized memory due to improper input validation. It affects multiple SQL Server versions spanning releases from 2016 through 2022. Microsoft has assessed exploitation as "Less Likely", but security researchers warn that the public disclosure of technical details could lead to increased exploitation attempts over time.

Critical vulnerabilities

CVE-2025-47981 (CVSS score 9.8) - SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability. Microsoft has marked this vulnerability as "More Likely" to be exploited within 30 days
CVE-2025-49704 (CVSS score 8.8) - Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2025-48822 (CVSS score 8.6) - Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability (CVSS score 8.6) - Critical
CVE-2025-49717 (CVSS score 8.5) - Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2025-49695 (CVSS score 8.4) - Microsoft Office Remote Code Execution Vulnerability
CVE-2025-49696 (CVSS score 8.4) - Microsoft Office Remote Code Execution Vulnerability
CVE-2025-49697 (CVSS score 8.4) - Microsoft Office Remote Code Execution Vulnerability
CVE-2025-49735 (CVSS score 8.1) - Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
CVE-2025-49698 (CVSS score 7.8) - Microsoft Word Remote Code Execution Vulnerability
CVE-2025-49702 (CVSS score 7.8) - Microsoft Office Remote Code Execution Vulnerability
CVE-2025-49703 (CVSS score 7.8) - Microsoft Word Remote Code Execution Vulnerability
CVE-2025-47980 (CVSS score 6.2) - Windows Imaging Component Information Disclosure Vulnerability
CVE-2025-36350 (CVSS score 5.6) - AMD: Transient Scheduler Attack in Store Queue
CVE-2025-36357 (CVSS score 5.6) - AMD: Transient Scheduler Attack in L1 Data Queue

Microsoft reports that that there are no known active exploits for any of the vulnerabilities addressed in this release. Given the critical severity and high exploitability ratings of several vulnerabilities, users are advised to apply updates immediately, especially for internet-facing, VPN-accessible, and domain-connected systems.

The vulnerability distribution includes:

53 elevation of privilege vulnerabilities,
41 remote code execution vulnerabilities,
18 information disclosure vulnerabilities,
8 security feature bypass vulnerabilities,
6 denial of service vulnerabilities,
and 4 spoofing vulnerabilities.

Full list of patched vulnerabilities

Tag	CVE ID	CVE Title	Severity
AMD L1 Data Queue	CVE-2025-36357	AMD: CVE-2025-36357 Transient Scheduler Attack in L1 Data Queue	Critical
AMD Store Queue	CVE-2025-36350	AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue	Critical
Azure Monitor Agent	CVE-2025-47988	Azure Monitor Agent Remote Code Execution Vulnerability	Important
Capability Access Management Service (camsvc)	CVE-2025-49690	Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability	Important
HID class driver	CVE-2025-48816	HID Class Driver Elevation of Privilege Vulnerability	Important
Kernel Streaming WOW Thunk Service Driver	CVE-2025-49675	Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	Important
Microsoft Brokering File System	CVE-2025-49677	Microsoft Brokering File System Elevation of Privilege Vulnerability	Important
Microsoft Brokering File System	CVE-2025-49694	Microsoft Brokering File System Elevation of Privilege Vulnerability	Important
Microsoft Brokering File System	CVE-2025-49693	Microsoft Brokering File System Elevation of Privilege Vulnerability	Important
Microsoft Configuration Manager	CVE-2025-47178	Microsoft Configuration Manager Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2025-49732	Windows Graphics Component Elevation of Privilege Vulnerability	Important
Microsoft Graphics Component	CVE-2025-49742	Windows Graphics Component Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2025-49744	Windows Graphics Component Elevation of Privilege Vulnerability	Important
Microsoft Input Method Editor (IME)	CVE-2025-49687	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability	Important
Microsoft Input Method Editor (IME)	CVE-2025-47991	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability	Important
Microsoft Input Method Editor (IME)	CVE-2025-47972	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability	Important
Microsoft MPEG-2 Video Extension	CVE-2025-48806	Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability	Important
Microsoft MPEG-2 Video Extension	CVE-2025-48805	Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2025-47994	Microsoft Office Elevation of Privilege Vulnerability	Important
Microsoft Office	CVE-2025-49697	Microsoft Office Remote Code Execution Vulnerability	Critical
Microsoft Office	CVE-2025-49695	Microsoft Office Remote Code Execution Vulnerability	Critical
Microsoft Office	CVE-2025-49696	Microsoft Office Remote Code Execution Vulnerability	Critical
Microsoft Office	CVE-2025-49699	Microsoft Office Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2025-49702	Microsoft Office Remote Code Execution Vulnerability	Critical
Microsoft Office Excel	CVE-2025-48812	Microsoft Excel Information Disclosure Vulnerability	Important
Microsoft Office Excel	CVE-2025-49711	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office PowerPoint	CVE-2025-49705	Microsoft PowerPoint Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2025-49701	Microsoft SharePoint Remote Code Execution Vulnerability	Important
Microsoft Office SharePoint	CVE-2025-49704	Microsoft SharePoint Remote Code Execution Vulnerability	Critical
Microsoft Office SharePoint	CVE-2025-49706	Microsoft SharePoint Server Spoofing Vulnerability	Important
Microsoft Office Word	CVE-2025-49703	Microsoft Word Remote Code Execution Vulnerability	Critical
Microsoft Office Word	CVE-2025-49698	Microsoft Word Remote Code Execution Vulnerability	Critical
Microsoft Office Word	CVE-2025-49700	Microsoft Word Remote Code Execution Vulnerability	Important
Microsoft PC Manager	CVE-2025-47993	Microsoft PC Manager Elevation of Privilege Vulnerability	Important
Microsoft PC Manager	CVE-2025-49738	Microsoft PC Manager Elevation of Privilege Vulnerability	Important
Microsoft Teams	CVE-2025-49731	Microsoft Teams Elevation of Privilege Vulnerability	Important
Microsoft Teams	CVE-2025-49737	Microsoft Teams Elevation of Privilege Vulnerability	Important
Microsoft Windows QoS scheduler	CVE-2025-49730	Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability	Important
Microsoft Windows Search Component	CVE-2025-49685	Windows Search Service Elevation of Privilege Vulnerability	Important
Office Developer Platform	CVE-2025-49756	Office Developer Platform Security Feature Bypass Vulnerability	Important
Remote Desktop Client	CVE-2025-48817	Remote Desktop Client Remote Code Execution Vulnerability	Important
Remote Desktop Client	CVE-2025-33054	Remote Desktop Spoofing Vulnerability	Important
Role: Windows Hyper-V	CVE-2025-48822	Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability	Critical
Role: Windows Hyper-V	CVE-2025-47999	Windows Hyper-V Denial of Service Vulnerability	Important
Role: Windows Hyper-V	CVE-2025-48002	Windows Hyper-V Information Disclosure Vulnerability	Important
Service Fabric	CVE-2025-21195	Azure Service Fabric Runtime Elevation of Privilege Vulnerability	Important
SQL Server	CVE-2025-49719	Microsoft SQL Server Information Disclosure Vulnerability	Important
SQL Server	CVE-2025-49718	Microsoft SQL Server Information Disclosure Vulnerability	Important
SQL Server	CVE-2025-49717	Microsoft SQL Server Remote Code Execution Vulnerability	Critical
Storage Port Driver	CVE-2025-49684	Windows Storage Port Driver Information Disclosure Vulnerability	Important
Universal Print Management Service	CVE-2025-47986	Universal Print Management Service Elevation of Privilege Vulnerability	Important
Virtual Hard Disk (VHDX)	CVE-2025-47971	Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability	Important
Virtual Hard Disk (VHDX)	CVE-2025-49689	Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability	Important
Virtual Hard Disk (VHDX)	CVE-2025-49683	Microsoft Virtual Hard Disk Remote Code Execution Vulnerability	Low
Virtual Hard Disk (VHDX)	CVE-2025-47973	Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability	Important
Visual Studio	CVE-2025-49739	Visual Studio Elevation of Privilege Vulnerability	Important
Visual Studio	CVE-2025-27614	MITRE: CVE-2025-27614 Gitk Arbitrary Code Execution Vulnerability	Unknown
Visual Studio	CVE-2025-27613	MITRE: CVE-2025-27613 Gitk Arguments Vulnerability	Unknown
Visual Studio	CVE-2025-46334	MITRE: CVE-2025-46334 Git Malicious Shell Vulnerability	Unknown
Visual Studio	CVE-2025-46835	MITRE: CVE-2025-46835 Git File Overwrite Vulnerability	Unknown
Visual Studio	CVE-2025-48384	MITRE: CVE-2025-48384 Git Symlink Vulnerability	Unknown
Visual Studio	CVE-2025-48386	MITRE: CVE-2025-48386 Git Credential Helper Vulnerability	Unknown
Visual Studio	CVE-2025-48385	MITRE: CVE-2025-48385 Git Protocol Injection Vulnerability	Unknown
Visual Studio Code - Python extension	CVE-2025-49714	Visual Studio Code Python Extension Remote Code Execution Vulnerability	Important
Windows Ancillary Function Driver for WinSock	CVE-2025-49661	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	Important
Windows AppX Deployment Service	CVE-2025-48820	Windows AppX Deployment Service Elevation of Privilege Vulnerability	Important
Windows BitLocker	CVE-2025-48818	BitLocker Security Feature Bypass Vulnerability	Important
Windows BitLocker	CVE-2025-48001	BitLocker Security Feature Bypass Vulnerability	Important
Windows BitLocker	CVE-2025-48804	BitLocker Security Feature Bypass Vulnerability	Important
Windows BitLocker	CVE-2025-48003	BitLocker Security Feature Bypass Vulnerability	Important
Windows BitLocker	CVE-2025-48800	BitLocker Security Feature Bypass Vulnerability	Important
Windows Connected Devices Platform Service	CVE-2025-48000	Windows Connected Devices Platform Service Elevation of Privilege Vulnerability	Important
Windows Connected Devices Platform Service	CVE-2025-49724	Windows Connected Devices Platform Service Remote Code Execution Vulnerability	Important
Windows Cred SSProvider Protocol	CVE-2025-47987	Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability	Important
Windows Cryptographic Services	CVE-2025-48823	Windows Cryptographic Services Information Disclosure Vulnerability	Important
Windows Event Tracing	CVE-2025-47985	Windows Event Tracing Elevation of Privilege Vulnerability	Important
Windows Event Tracing	CVE-2025-49660	Windows Event Tracing Elevation of Privilege Vulnerability	Important
Windows Fast FAT Driver	CVE-2025-49721	Windows Fast FAT File System Driver Elevation of Privilege Vulnerability	Important
Windows GDI	CVE-2025-47984	Windows GDI Information Disclosure Vulnerability	Important
Windows Imaging Component	CVE-2025-47980	Windows Imaging Component Information Disclosure Vulnerability	Critical
Windows KDC Proxy Service (KPSSVC)	CVE-2025-49735	Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability	Critical
Windows Kerberos	CVE-2025-47978	Windows Kerberos Denial of Service Vulnerability	Important
Windows Kernel	CVE-2025-49666	Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability	Important
Windows Kernel	CVE-2025-26636	Windows Kernel Information Disclosure Vulnerability	Important
Windows Kernel	CVE-2025-48809	Windows Secure Kernel Mode Information Disclosure Vulnerability	Important
Windows Kernel	CVE-2025-48808	Windows Kernel Information Disclosure Vulnerability	Important
Windows MBT Transport driver	CVE-2025-47996	Windows MBT Transport Driver Elevation of Privilege Vulnerability	Important
Windows Media	CVE-2025-49682	Windows Media Elevation of Privilege Vulnerability	Important
Windows Media	CVE-2025-49691	Windows Miracast Wireless Display Remote Code Execution Vulnerability	Important
Windows Netlogon	CVE-2025-49716	Windows Netlogon Denial of Service Vulnerability	Important
Windows Notification	CVE-2025-49726	Windows Notification Elevation of Privilege Vulnerability	Important
Windows Notification	CVE-2025-49725	Windows Notification Elevation of Privilege Vulnerability	Important
Windows NTFS	CVE-2025-49678	NTFS Elevation of Privilege Vulnerability	Important
Windows Performance Recorder	CVE-2025-49680	Windows Performance Recorder (WPR) Denial of Service Vulnerability	Important
Windows Print Spooler Components	CVE-2025-49722	Windows Print Spooler Denial of Service Vulnerability	Important
Windows Remote Desktop Licensing Service	CVE-2025-48814	Remote Desktop Licensing Service Security Feature Bypass Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49688	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49676	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49672	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49670	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49671	Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49753	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49729	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49673	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49674	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49669	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49663	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49668	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49681	Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-49657	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-47998	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Routing and Remote Access Service (RRAS)	CVE-2025-48824	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Important
Windows Secure Kernel Mode	CVE-2025-48810	Windows Secure Kernel Mode Information Disclosure Vulnerability	Important
Windows Shell	CVE-2025-49679	Windows Shell Elevation of Privilege Vulnerability	Important
Windows SmartScreen	CVE-2025-49740	Windows SmartScreen Security Feature Bypass Vulnerability	Important
Windows SMB	CVE-2025-48802	Windows SMB Server Spoofing Vulnerability	Important
Windows SPNEGO Extended Negotiation	CVE-2025-47981	SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability	Critical
Windows SSDP Service	CVE-2025-47976	Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability	Important
Windows SSDP Service	CVE-2025-47975	Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability	Important
Windows SSDP Service	CVE-2025-48815	Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability	Important
Windows StateRepository API	CVE-2025-49723	Windows StateRepository API Server file Tampering Vulnerability	Important
Windows Storage	CVE-2025-49760	Windows Storage Spoofing Vulnerability	Moderate
Windows Storage VSP Driver	CVE-2025-47982	Windows Storage VSP Driver Elevation of Privilege Vulnerability	Important
Windows TCP/IP	CVE-2025-49686	Windows TCP/IP Driver Elevation of Privilege Vulnerability	Important
Windows TDX.sys	CVE-2025-49658	Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability	Important
Windows TDX.sys	CVE-2025-49659	Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability	Important
Windows Universal Plug and Play (UPnP) Device Host	CVE-2025-48821	Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability	Important
Windows Universal Plug and Play (UPnP) Device Host	CVE-2025-48819	Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability	Important
Windows Update Service	CVE-2025-48799	Windows Update Service Elevation of Privilege Vulnerability	Important
Windows User-Mode Driver Framework Host	CVE-2025-49664	Windows User-Mode Driver Framework Host Information Disclosure Vulnerability	Important
Windows Virtualization-Based Security (VBS) Enclave	CVE-2025-47159	Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability	Important
Windows Virtualization-Based Security (VBS) Enclave	CVE-2025-48811	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability	Important
Windows Virtualization-Based Security (VBS) Enclave	CVE-2025-48803	Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability	Important
Windows Win32K - GRFX	CVE-2025-49727	Win32k Elevation of Privilege Vulnerability	Important
Windows Win32K - ICOMP	CVE-2025-49733	Win32k Elevation of Privilege Vulnerability	Important
Windows Win32K - ICOMP	CVE-2025-49667	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	Important
Workspace Broker	CVE-2025-49665	Workspace Broker Elevation of Privilege Vulnerability	Important

Microsoft releases July 2025 Patch fixing one critical zero-day, 129 other flaws

Read More
Microsoft silently mitigates Windows LNK Zero-Day flaw exploited …
Apple releases emergency update iOS 18.3.1 and iPadOS …
TP-Link releases fix for critical flaw in Archer …
Adobe releases April 2025 patches for multiple products
Google releases April 2025 Android security update, patching …