Skip to the content
The Update Bureau
Security

KB5062553: all 102 vulnerabilities

Cumulative update for Windows Server, version 2025, July 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

102 vulnerabilities fixed
5 critical 95 important 1 moderate 1 low
VulnerabilitySeverityCVSS
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Critical 9.8
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
Critical 8.6
Windows Imaging Component Information Disclosure Vulnerability
Critical 6.2
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue
Critical 5.6
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue
Critical 5.6
Universal Print Management Service Elevation of Privilege Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows StateRepository API Server file Tampering Vulnerability
Important 8.8
Windows Connected Devices Platform Service Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows SmartScreen Security Feature Bypass Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Remote Desktop Spoofing Vulnerability
Important 8.1
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
Important 8.0
Windows Miracast Wireless Display Remote Code Execution Vulnerability
Important 8.0
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
Important 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Important 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Important 7.8
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Important 7.8
Windows Storage VSP Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Event Tracing Elevation of Privilege Vulnerability
Important 7.8
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
Important 7.8
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
Important 7.8
Microsoft PC Manager Elevation of Privilege Vulnerability
Important 7.8
Windows MBT Transport Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Important 7.8
Windows Update Service Elevation of Privilege Vulnerability
Important 7.8
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
Important 7.8
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
Important 7.8
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Important 7.8
HID Class Driver Elevation of Privilege Vulnerability
Important 7.8
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Important 7.8
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Event Tracing Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Workspace Broker Elevation of Privilege Vulnerability
Important 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Shell Elevation of Privilege Vulnerability
Important 7.8
Windows TCP/IP Driver Elevation of Privilege Vulnerability
Important 7.8
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Important 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability
Important 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability
Important 7.8
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Notification Elevation of Privilege Vulnerability
Important 7.8
Windows Notification Elevation of Privilege Vulnerability
Important 7.8
Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Win32k Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Important 7.8
Windows StateRepository API Server file Elevation of Privilege Vulnerability
Important 7.8
Windows MBT Transport Driver Elevation of Privilege Vulnerability
Important 7.8
Windows GDI Information Disclosure Vulnerability
Important 7.5
Remote Desktop Licensing Service Security Feature Bypass Vulnerability
Important 7.5
Windows Storage-based Management Service Remote Code Execution Vulnerability
Important 7.5
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Important 7.4
Windows Performance Recorder (WPR) Denial of Service Vulnerability
Important 7.3
Windows Media Elevation of Privilege Vulnerability
Important 7.3
Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability
Important 7.2
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Important 7.1
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Important 7.1
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Important 7.0
NTFS Elevation of Privilege Vulnerability
Important 7.0
Win32k Elevation of Privilege Vulnerability
Important 7.0
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.0
Windows Hyper-V Denial of Service Vulnerability
Important 6.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows BitLocker Security Feature Bypass Vulnerability
Important 6.8
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
Important 6.7
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Important 6.7
Windows Kerberos Denial of Service Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Important 6.5
Windows Cryptographic Services Information Disclosure Vulnerability
Important 5.9
Windows Hyper-V Information Disclosure Vulnerability
Important 5.7
Windows Print Spooler Denial of Service Vulnerability
Important 5.7
Windows Kernel Information Disclosure Vulnerability
Important 5.5
Windows Kernel Information Disclosure Vulnerability
Important 5.5
Windows Secure Kernel Mode Information Disclosure Vulnerability
Important 5.5
Windows Secure Kernel Mode Information Disclosure Vulnerability
Important 5.5
Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability
Important 5.5
Windows User-Mode Driver Framework Host Information Disclosure Vulnerability
Important 5.5
Windows Storage Port Driver Information Disclosure Vulnerability
Important 5.5
Windows Storage Spoofing Vulnerability
Moderate 3.5
Microsoft Virtual Hard Disk Remote Code Execution Vulnerability
Low 7.8