Skip to the content
The Update Bureau
Security

KB5058379: all 36 vulnerabilities

Cumulative update for Windows 10, versions 21H2 and 22H2, May 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

36 vulnerabilities fixed
5 exploited 3 critical 33 important
VulnerabilitySeverityCVSS
CVE-2025-30400 Exploited
Microsoft DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-32701 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-32706 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-32709 Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-30397 Exploited
Scripting Engine Memory Corruption Vulnerability
 Important 7.5
CVE-2025-29966
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2025-29967
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2025-29833
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
 Critical 7.7
CVE-2025-29840
Windows Media Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-29962
Windows Media Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-29963
Windows Media Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-29964
Windows Media Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-24063
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-30385
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-30388
Windows Graphics Component Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-47955
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-29842
UrlMon Security Feature Bypass Vulnerability
 Important 7.5
CVE-2025-29969
MS-EVEN RPC Remote Code Execution Vulnerability
 Important 7.5
CVE-2025-27468
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-29841
Universal Print Management Service Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-29830
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29832
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29835
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29836
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29958
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29959
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29960
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29961
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29957
Windows Deployment Services Denial of Service Vulnerability
 Important 6.2
CVE-2025-29954
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 5.9
CVE-2025-29974
Windows Kernel Information Disclosure Vulnerability
 Important 5.7
CVE-2025-29829
Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2025-29837
Windows Installer Information Disclosure Vulnerability
 Important 5.5
CVE-2025-29956
Windows SMB Information Disclosure Vulnerability
 Important 5.4
CVE-2025-55229
Windows Certificate Spoofing Vulnerability
 Important 5.3
CVE-2025-29839
Windows Multiple UNC Provider Driver Information Disclosure Vulnerability
 Important 4.0