Microsoft Patch Tuesday, June 2025: the CVEs
Filter
Microsoft Patch Tuesday June 2025: the CVEs Microsoft published on 10 June 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: May 2025, Apr 2025, Mar 2025, Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024, Jun 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday
- 8.8CVE-2025-33073KEVExploitEPSS 83%
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
- 8.8CVE-2025-33053KEVExploitEPSS 87%
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.