Skip to the content
The Update Bureau
Security

KB5061010: all 37 vulnerabilities

Cumulative update for Windows Server, version 2016, June 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

37 vulnerabilities fixed
1 exploited 3 critical 34 important
VulnerabilitySeverityCVSS
CVE-2025-33053 Exploited
Internet Shortcut Files Remote Code Execution Vulnerability
Important 8.8
Windows Netlogon Elevation of Privilege Vulnerability
Critical 8.1
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Critical 8.1
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
Critical 8.1
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows SMB Client Elevation of Privilege Vulnerability
Important 8.8
Windows Task Scheduler Elevation of Privilege Vulnerability
Important 8.4
Win32k Elevation of Privilege Vulnerability
Important 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Windows Media Elevation of Privilege Vulnerability
Important 7.8
Windows SMB Client Elevation of Privilege Vulnerability
Important 7.8
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Important 7.5
DHCP Server Service Denial of Service Vulnerability
Important 7.5
DHCP Server Service Denial of Service Vulnerability
Important 7.5
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Important 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 7.5
Windows Recovery Driver Elevation of Privilege Vulnerability
Important 7.3
Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass
Important 6.7
Remote Desktop Protocol Client Information Disclosure Vulnerability
Important 6.5
Windows Local Security Authority (LSA) Denial of Service Vulnerability
Important 6.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Port Driver Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Storage Management Provider Information Disclosure Vulnerability
Important 5.5
Windows Shortcut Files Security Feature Bypass Vulnerability
Important 5.4