Skip to the content
The Update Bureau
Security

KB5062572: all 96 vulnerabilities

Cumulative update for Windows Server, version 2022, July 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

96 vulnerabilities fixed
5 critical 89 important 1 moderate 1 low
VulnerabilitySeverityCVSS
CVE-2025-47981
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-48822
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
 Critical 8.6
CVE-2025-47980
Windows Imaging Component Information Disclosure Vulnerability
 Critical 6.2
CVE-2024-36350
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
 Critical 5.6
CVE-2024-36357
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
 Critical 5.6
CVE-2025-47986
Universal Print Management Service Elevation of Privilege Vulnerability
 Important 8.8
CVE-2025-47998
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-48817
Remote Desktop Client Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-48824
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49657
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49663
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49668
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49669
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49672
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49673
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49674
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49676
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49687
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
 Important 8.8
CVE-2025-49688
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49723
Windows StateRepository API Server file Tampering Vulnerability
 Important 8.8
CVE-2025-49724
Windows Connected Devices Platform Service Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49729
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49740
Windows SmartScreen Security Feature Bypass Vulnerability
 Important 8.8
CVE-2025-49753
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-49757
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-47972
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
 Important 8.0
CVE-2025-49691
Windows Miracast Wireless Display Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-47159
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47971
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47973
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47976
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47982
Windows Storage VSP Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47985
Windows Event Tracing Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47987
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47991
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47996
Windows MBT Transport Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-48000
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-48805
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-48806
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-48815
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-48816
HID Class Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-48820
Windows AppX Deployment Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49659
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49660
Windows Event Tracing Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49661
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49665
Workspace Broker Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49667
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49675
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49679
Windows Shell Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49686
Windows TCP/IP Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49689
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49721
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49725
Windows Notification Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49726
Windows Notification Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49730
Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49732
Windows Graphics Component Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49733
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-49742
Windows Graphics Component Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-53789
Windows StateRepository API Server file Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-55230
Windows MBT Transport Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47984
Windows GDI Information Disclosure Vulnerability
 Important 7.5
CVE-2025-48814
Remote Desktop Licensing Service Security Feature Bypass Vulnerability
 Important 7.5
CVE-2025-49716
Windows Netlogon Denial of Service Vulnerability
 Important 7.5
CVE-2025-55231
Windows Storage-based Management Service Remote Code Execution Vulnerability
 Important 7.5
CVE-2025-49690
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
 Important 7.4
CVE-2025-49680
Windows Performance Recorder (WPR) Denial of Service Vulnerability
 Important 7.3
CVE-2025-49682
Windows Media Elevation of Privilege Vulnerability
 Important 7.3
CVE-2025-49666
Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability
 Important 7.2
CVE-2025-48819
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
 Important 7.1
CVE-2025-48821
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
 Important 7.1
CVE-2025-47975
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-49678
NTFS Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-49685
Windows Search Service Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-49727
Win32k Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-49744
Windows Graphics Component Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-47999
Windows Hyper-V Denial of Service Vulnerability
 Important 6.8
CVE-2025-48001
Windows BitLocker Security Feature Bypass Vulnerability
 Important 6.8
CVE-2025-48003
Windows BitLocker Security Feature Bypass Vulnerability
 Important 6.8
CVE-2025-48800
Windows BitLocker Security Feature Bypass Vulnerability
 Important 6.8
CVE-2025-48804
Windows BitLocker Security Feature Bypass Vulnerability
 Important 6.8
CVE-2025-48818
Windows BitLocker Security Feature Bypass Vulnerability
 Important 6.8
CVE-2025-48803
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
 Important 6.7
CVE-2025-48811
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
 Important 6.7
CVE-2025-47978
Windows Kerberos Denial of Service Vulnerability
 Important 6.5
CVE-2025-48802
Windows SMB Server Spoofing Vulnerability
 Important 6.5
CVE-2025-49670
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 6.5
CVE-2025-49671
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-49681
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-48823
Windows Cryptographic Services Information Disclosure Vulnerability
 Important 5.9
CVE-2025-49722
Windows Print Spooler Denial of Service Vulnerability
 Important 5.7
CVE-2025-48808
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2025-49658
Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2025-49664
Windows User-Mode Driver Framework Host Information Disclosure Vulnerability
 Important 5.5
CVE-2025-49684
Windows Storage Port Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2025-49760
Windows Storage Spoofing Vulnerability
 Moderate 3.5
CVE-2025-49683
Microsoft Virtual Hard Disk Remote Code Execution Vulnerability
 Low 7.8