Skip to the content
The Update Bureau
Windows 10 1607 Windows 10 1607 Security update
Patch Tuesday Zero-day

KB5058383

KB5058383: Cumulative update for Windows 10, version 1607, May 2025. Exploited scripting and Windows driver flaws addressed

In short

Addresses 33 vulnerabilities, including four that attackers are exploiting. It also improves Secure Boot detection of Linux systems.

Does it affect you? Applies to: Devices running Windows 10 Enterprise LTSB 2016, version 1607, on x86 or x64.

Build
14393.8066
Security
33 fixed · 3 critical · 4 exploited
Restart
Required

Microsoft publishes separate notes for this KB for Windows Server.

What changes

Improvement 1 change

Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI)

Verified in package
  • Secure Boot detection of Linux systems is improved.1
    Applies improvements to Secure Boot Advanced Targeting (SBAT) for the detection of Linux systems.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-05-13
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5058921, KB5055521, KB5053594, KB5052006
+4 earlier KB5049993, KB5048671, KB5046612, KB5037423
Replaced by
KB5061010
VersionBuildChannel
1607 14393.8066 General availability

Security

33 vulnerabilities fixed
4 exploited 3 critical 30 important
VulnerabilitySeverityCVSS
CVE-2025-32701 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-32706 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-32709 Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-30397 Exploited
Scripting Engine Memory Corruption Vulnerability
 Important 7.5
CVE-2025-29966
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2025-29967
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2025-29833
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
 Critical 7.7

The table lists the 7 exploited, publicly disclosed or critical vulnerabilities. See all 33 vulnerabilities →

Updated components

492 files changed since the previous update for the same versions.

Top changed componentsFiles
Bluetooth24
Secure Boot14
Remote Desktop11
Kernel9
Networking8
Hyper-V and virtualization7
File Explorer and shell6
Security and sign-in6
Settings4
Storage and file systems4
Audio1

Verified in package: changed files confirm Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI).

Sources

Updated
Cited passages from Microsoft's official notes (1)
  1. 1. [Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI)] This update applies improvements to SBAT for the detection of Linux systems. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake