cve.bz

Microsoft Patch Tuesday, August 2025: the CVEs

Filter

Microsoft Patch Tuesday August 2025: the CVEs Microsoft published on 12 August 2025, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jul 2025, Jun 2025, May 2025, Apr 2025, Mar 2025, Feb 2025, Jan 2025, Dec 2024, Nov 2024, Oct 2024, Sep 2024, Aug 2024. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 9.8CVE-2025-53766EPSS 12%

    Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

  2. 9.1CVE-2025-50171EPSS 1.1%

    Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network.

  3. 9.8CVE-2025-50165EPSS 15%

    Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.