cve.bz

Microsoft Patch Tuesday, July 2025: the CVEs, page 2

Filter

Microsoft Patch Tuesday July 2025: the CVEs Microsoft published on 8 July 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jun 2025, May 2025, Apr 2025, Mar 2025, Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024, Jul 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 5.7CVE-2025-48002EPSS 0.6%

    Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network.

  2. 6.8CVE-2025-48001EPSS 0.4%

    Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  3. 7.8CVE-2025-48000EPSS 0.3%

    Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

  4. 6.8CVE-2025-47999EPSS 0.4%

    Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

  5. 8.8CVE-2025-47998EPSS 1.1%

    Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  6. 7.8CVE-2025-47996EPSS 0.4%

    Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.

  7. 8.6CVE-2025-47994EPSS 3.3%

    Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.

  8. 7.8CVE-2025-47993EPSS 0.4%

    Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2025-47991EPSS 0.4%

    Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

  10. 7.5CVE-2025-47988EPSS 1.0%

    Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.

  11. 7.8CVE-2025-47987ExploitEPSS 1.8%

    Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.

  12. 8.8CVE-2025-47986EPSS 0.4%

    Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2025-47985EPSS 0.4%

    Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

  14. 7.5CVE-2025-47984EPSS 23%

    Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.

  15. 7.8CVE-2025-47982EPSS 0.4%

    Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

  16. 9.8CVE-2025-47981EPSS 41%

    Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.

  17. 6.2CVE-2025-47980EPSS 0.7%

    Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.

  18. 6.5CVE-2025-47978EPSS 2.2%

    Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

  19. 7.8CVE-2025-47976EPSS 0.5%

    Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

  20. 7.0CVE-2025-47975EPSS 0.4%

    Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2025-47973EPSS 0.5%

    Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

  22. 8.0CVE-2025-47972EPSS 0.7%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges over a network.

  23. 7.8CVE-2025-47971EPSS 0.5%

    Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

  24. 8.0CVE-2025-47178EPSS 2.7%

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network.

  25. 7.8CVE-2025-47159EPSS 0.4%

    Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

  26. 8.1CVE-2025-33054EPSS 1.0%

    Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network.

  27. 5.5CVE-2025-26636EPSS 0.5%

    Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.

  28. 6.0CVE-2025-21195EPSS 0.4%

    Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.

  29. 7.0CVE-2025-7326EPSS 0.7%

    Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future …