Patch days / June 2025

Microsoft Patch Tuesday — June 2025

Tuesday, 10 June 2025

Vulnerabilities: 65
Critical: 1
High: 42
Zero-days: 1
Public exploit: 11

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2025-33073 Exploited Public exploit Windows SMB Client Elevation of Privilege Vulnerability
EPSS 83%
High 8.8
CVE-2025-33053 Zero-day Public exploit Internet Shortcut Files Remote Code Execution Vulnerability
EPSS 87%

Critical 1

Critical 9.3
CVE-2025-32711 Public exploit M365 Copilot Information Disclosure Vulnerability
EPSS 7.2%

Public exploit code 8

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2025-47166 Public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 23%
High 8.4
CVE-2025-47957 Public exploit Microsoft Word Remote Code Execution Vulnerability
EPSS 1.4%
High 8.1
CVE-2025-32710 Public exploit Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2025-47175 Public exploit Microsoft PowerPoint Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2025-47165 Public exploit Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2025-47176 Public exploit Microsoft Outlook Remote Code Execution Vulnerability
High 7.8
CVE-2025-47962 Public exploit Windows SDK Elevation of Privilege Vulnerability
EPSS 1.6%
Medium 6.7
CVE-2025-47171 Public exploit Microsoft Outlook Remote Code Execution Vulnerability
EPSS 1.8%

All vulnerabilities 65

Critical1 Show

Critical 9.3
CVE-2025-32711 Public exploit M365 Copilot Information Disclosure Vulnerability
EPSS 7.2%

High42 Show

High 8.8
CVE-2025-33073 Exploited Public exploit Windows SMB Client Elevation of Privilege Vulnerability
EPSS 83%
High 8.8
CVE-2025-33053 Zero-day Public exploit Internet Shortcut Files Remote Code Execution Vulnerability
EPSS 87%
High 8.8
CVE-2025-47166 Public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 23%
High 8.8
CVE-2025-33064 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2025-33066 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-47163 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 22%
High 8.8
CVE-2025-47172 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 1.8%
High 8.4
CVE-2025-47957 Public exploit Microsoft Word Remote Code Execution Vulnerability
EPSS 1.4%
High 8.4
CVE-2025-32717 Microsoft Word Remote Code Execution Vulnerability
High 8.4
CVE-2025-33067 Windows Task Scheduler Elevation of Privilege Vulnerability
High 8.4
CVE-2025-47162 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-47164 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-47167 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-47953 Microsoft Office Remote Code Execution Vulnerability
High 8.2
CVE-2025-47977 Nuance Digital Engagement Platform Spoofing Vulnerability
High 8.1
CVE-2025-32710 Public exploit Windows Remote Desktop Services Remote Code Execution Vulnerability
EPSS 1.1%
High 8.1
CVE-2025-29828 Windows Schannel Remote Code Execution Vulnerability
EPSS 1.3%
High 8.1
CVE-2025-33070 Windows Netlogon Elevation of Privilege Vulnerability
EPSS 10%
High 8.1
CVE-2025-33071 Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
EPSS 23%
High 7.8
CVE-2025-47175 Public exploit Microsoft PowerPoint Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2025-47165 Public exploit Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2025-47176 Public exploit Microsoft Outlook Remote Code Execution Vulnerability
High 7.8
CVE-2025-47962 Public exploit Windows SDK Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.8
CVE-2025-32712 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2025-32713 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-32714 Windows Installer Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.8
CVE-2025-32716 Windows Media Elevation of Privilege Vulnerability
High 7.8
CVE-2025-32718 Windows SMB Client Elevation of Privilege Vulnerability
High 7.8
CVE-2025-33075 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47168 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-47169 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-47170 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-47173 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-47174 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-47955 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47968 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
High 7.5
CVE-2025-32724 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
EPSS 1.9%
High 7.5
CVE-2025-32725 DHCP Server Service Denial of Service Vulnerability
EPSS 1.9%
High 7.5
CVE-2025-33050 DHCP Server Service Denial of Service Vulnerability
EPSS 1.9%
High 7.5
CVE-2025-33056 Windows Local Security Authority (LSA) Denial of Service Vulnerability
EPSS 1.8%
High 7.5
CVE-2025-33068 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 1.9%
High 7.3
CVE-2025-32721 Windows Recovery Driver Elevation of Privilege Vulnerability

Medium22 Show

Medium 6.7
CVE-2025-47171 Public exploit Microsoft Outlook Remote Code Execution Vulnerability
EPSS 1.8%
Medium 6.5
CVE-2025-32715 Remote Desktop Protocol Client Information Disclosure Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2025-33057 Windows Local Security Authority (LSA) Denial of Service Vulnerability
EPSS 1.9%
Medium 5.5
CVE-2025-24065 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-24068 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-24069 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-32719 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-32720 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-32722 Windows Storage Port Driver Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.5
CVE-2025-33052 Windows DWM Core Library Information Disclosure Vulnerability
Medium 5.5
CVE-2025-33055 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-33058 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-33059 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-33060 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-33061 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-33062 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-33063 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-33065 Windows Storage Management Provider Information Disclosure Vulnerability
Medium 5.5
CVE-2025-47956 Windows Security App Spoofing Vulnerability
Medium 5.4
CVE-2025-47160 Windows Shortcut Files Security Feature Bypass Vulnerability
Medium 5.1
CVE-2025-33069 Windows App Control for Business Security Feature Bypass Vulnerability
Medium 4.4
CVE-2025-47969 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability