Skip to the content
The Update Bureau
Security

KB5060842: all 40 vulnerabilities

Cumulative update for Windows Server, version 2025, June 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

40 vulnerabilities fixed
1 exploited 4 critical 36 important
VulnerabilitySeverityCVSS
CVE-2025-33053 Exploited
Internet Shortcut Files Remote Code Execution Vulnerability
Important 8.8
Windows Schannel Remote Code Execution Vulnerability
Critical 8.1
Windows Netlogon Elevation of Privilege Vulnerability
Critical 8.1
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Critical 8.1
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Critical 8.1
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows SMB Client Elevation of Privilege Vulnerability
Important 8.8
Windows Task Scheduler Elevation of Privilege Vulnerability
Important 8.4
Win32k Elevation of Privilege Vulnerability
Important 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Windows SMB Client Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Important 7.5
DHCP Server Service Denial of Service Vulnerability
Important 7.5
DHCP Server Service Denial of Service Vulnerability
Important 7.5
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Windows Recovery Driver Elevation of Privilege Vulnerability
Important 7.3
Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass
Important 6.7
Remote Desktop Protocol Client Information Disclosure Vulnerability
Important 6.5
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Important 6.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Port Driver Information Disclosure Vulnerability
Important 5.5
Windows DWM Core Library Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Shortcut Files Security Feature Bypass Vulnerability
Important 5.4
Windows App Control for Business Security Feature Bypass Vulnerability
Important 5.1