Skip to the content
The Update Bureau
Security

KB5058383: all 39 vulnerabilities

Cumulative update for Windows Server, version 2016, May 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

39 vulnerabilities fixed
4 exploited 5 critical 34 important
VulnerabilitySeverityCVSS
CVE-2025-32701 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-32706 Exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-32709 Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-30397 Exploited
Scripting Engine Memory Corruption Vulnerability
 Important 7.5
CVE-2025-29966
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2025-29967
Remote Desktop Client Remote Code Execution Vulnerability
 Critical 8.8
CVE-2024-49128
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-32710
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-29833
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
 Critical 7.7
CVE-2025-29840
Windows Media Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-29962
Windows Media Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-24063
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-30385
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-30388
Windows Graphics Component Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-32707
NTFS Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-47955
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-26677
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
 Important 7.5
CVE-2025-29831
Windows Remote Desktop Services Remote Code Execution Vulnerability
 Important 7.5
CVE-2025-29842
UrlMon Security Feature Bypass Vulnerability
 Important 7.5
CVE-2025-29969
MS-EVEN RPC Remote Code Execution Vulnerability
 Important 7.5
CVE-2025-27468
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-29830
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29832
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29835
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29836
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29958
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29959
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29960
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29961
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-29968
Active Directory Certificate Services (AD CS) Denial of Service Vulnerability
 Important 6.5
CVE-2025-29957
Windows Deployment Services Denial of Service Vulnerability
 Important 6.2
CVE-2025-29954
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 5.9
CVE-2025-30394
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
 Important 5.9
CVE-2025-29974
Windows Kernel Information Disclosure Vulnerability
 Important 5.7
CVE-2025-29829
Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2025-29837
Windows Installer Information Disclosure Vulnerability
 Important 5.5
CVE-2025-29956
Windows SMB Information Disclosure Vulnerability
 Important 5.4
CVE-2025-55229
Windows Certificate Spoofing Vulnerability
 Important 5.3
CVE-2025-29839
Windows Multiple UNC Provider Driver Information Disclosure Vulnerability
 Important 4.0