Skip to the content
The Update Bureau
Exchange Server Subscription Edition RTM Exchange Server Subscription Edition RTM Security update
Patch Tuesday

KB5063224

KB5063224: Security update for Exchange Server Subscription Edition RTM, August 2025. Four Exchange flaws fixed; eDiscovery and public-folder issues resolved

In short

Addresses four Important Exchange Server vulnerabilities and fixes problems with eDiscovery exports, application pools after MSIPC is enabled, and public-folder permissions in Outlook.

Does it affect you? Applies to: Servers running Exchange Server Subscription Edition RTM, on x64.

Build
15.2.2562.20
Servicing branch
RTM
Security
4 fixed

What changes

Fixes 3 changes

eDiscovery

  • eDiscovery search results can be exported to a discovery mailbox again.1

Application pools

  • Application pools no longer stop responding, and performance is no longer affected after MSIPC is enabled.2

Public folders

  • Public-folder management in Outlook no longer modifies the incorrect ACE.3

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-08-12
Classification
Security Updates
Type
Cumulative update
Servicing branch
RTM
Replaced by
KB5066373
VersionBuildChannel
SE 15.2.2562.20 General availability

Security

4 vulnerabilities fixed
4 important
VulnerabilitySeverityCVSS
CVE-2025-33051
Microsoft Exchange Server Information Disclosure Vulnerability
 Important 7.5
CVE-2025-25005
Microsoft Exchange Server Tampering Vulnerability
 Important 6.5
CVE-2025-25006
Microsoft Exchange Server Spoofing Vulnerability
 Important 5.3
CVE-2025-25007
Microsoft Exchange Server Spoofing Vulnerability
 Important 5.3

Sources

Updated
Cited passages from Microsoft's official notes (3)
  1. 1. Exchange Server fails to export eDiscovery search results to a discovery mailbox support.microsoft.com
  2. 2. Application pools stop responding and performance is affected after MSIPC is enabled support.microsoft.com
  3. 3. Incorrect ACE is modified through public folder management in Outlook support.microsoft.com
Checked automatically: 7 of 8 checks passed, 3 quoted passages · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake