Skip to the content
The Update Bureau
Security

KB5063871: all 48 vulnerabilities

Cumulative update for Windows Server, version 2016, August 2025. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

48 vulnerabilities fixed
3 critical 45 important
VulnerabilitySeverityCVSS
CVE-2025-53766
GDI+ Remote Code Execution Vulnerability
 Critical 9.8
CVE-2025-53778
Windows NTLM Elevation of Privilege Vulnerability
 Critical 8.8
CVE-2025-50177
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2025-50163
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-53143
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-53144
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-53145
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Important 8.8
CVE-2025-50160
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-50162
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-50164
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-53720
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.0
CVE-2025-49761
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-50153
Desktop Window Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-50155
Windows Push Notifications Apps Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-50173
Windows Installer Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53132
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53141
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53149
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53152
Desktop Windows Manager Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-53154
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53155
Windows Hyper-V Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53723
Windows Hyper-V Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53724
Windows Push Notifications Apps Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53725
Windows Push Notifications Apps Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53726
Windows Push Notifications Apps Elevation of Privilege Vulnerability
 Important 7.8
CVE-2025-53722
Windows Remote Desktop Services Denial of Service Vulnerability
 Important 7.5
CVE-2025-50159
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability
 Important 7.3
CVE-2025-50161
Win32k Elevation of Privilege Vulnerability
 Important 7.3
CVE-2025-49762
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-50158
Windows NTFS Information Disclosure Vulnerability
 Important 7.0
CVE-2025-50167
Windows Hyper-V Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-53134
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-53135
DirectX Graphics Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-53137
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-53140
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-53147
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-53718
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.0
CVE-2025-49751
Windows Hyper-V Denial of Service Vulnerability
 Important 6.8
CVE-2025-49743
Windows Graphics Component Elevation of Privilege Vulnerability
 Important 6.7
CVE-2025-50154
Microsoft Windows File Explorer Spoofing Vulnerability
 Important 6.5
CVE-2025-50166
Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability
 Important 6.5
CVE-2025-50156
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 5.7
CVE-2025-50157
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 5.7
CVE-2025-53138
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 5.7
CVE-2025-53148
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 5.7
CVE-2025-53153
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 5.7
CVE-2025-53719
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 5.7
CVE-2025-53136
NT OS Kernel Information Disclosure Vulnerability
 Important 5.5