Patch days / July 2025

Microsoft Patch Tuesday — July 2025

Tuesday, 8 July 2025

Vulnerabilities: 128
Critical: 1
High: 97
Zero-days: 0
Public exploit: 12

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2025-49704 Exploited Public exploit Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 100%
Medium 6.5
CVE-2025-49706 Exploited Public exploit Microsoft SharePoint Server Spoofing Vulnerability
EPSS 99%

Critical 1

Critical 9.8
CVE-2025-47981 Public exploit SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
EPSS 41%

Public exploit code 9

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.0
CVE-2025-47178 Public exploit Microsoft Configuration Manager Remote Code Execution Vulnerability
EPSS 3%
High 7.8
CVE-2025-47987 Public exploit Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
EPSS 1.8%
High 7.8
CVE-2025-49683 Public exploit Microsoft Virtual Hard Disk Remote Code Execution Vulnerability
EPSS 2.1%
High 7.8
CVE-2025-49730 Public exploit Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-48799 Public exploit Windows Update Service Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.2
CVE-2025-49666 Public exploit Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability
EPSS 1.4%
High 7.0
CVE-2025-49677 Public exploit Microsoft Brokering File System Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.0
CVE-2025-49744 Public exploit Windows Graphics Component Elevation of Privilege Vulnerability
Medium 6.8
CVE-2025-48804 Public exploit Windows BitLocker Security Feature Bypass Vulnerability

All vulnerabilities 128

Critical1 Show

Critical 9.8
CVE-2025-47981 Public exploit SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
EPSS 41%

High97 Show

High 8.8
CVE-2025-49704 Exploited Public exploit Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 100%
High 8.8
CVE-2025-47986 Universal Print Management Service Elevation of Privilege Vulnerability
High 8.8
CVE-2025-47998 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-48817 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-48824 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-49657 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2025-49663 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49668 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49669 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49672 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49673 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49674 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49676 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49687 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
High 8.8
CVE-2025-49688 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49701 Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2025-49723 Windows StateRepository API Server file Tampering Vulnerability
High 8.8
CVE-2025-49724 Windows Connected Devices Platform Service Remote Code Execution Vulnerability
EPSS 9.8%
High 8.8
CVE-2025-49729 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-49739 Visual Studio Elevation of Privilege Vulnerability
High 8.8
CVE-2025-49740 Windows SmartScreen Security Feature Bypass Vulnerability
High 8.8
CVE-2025-49753 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.6
CVE-2025-48822 Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
High 8.5
CVE-2025-49717 Microsoft SQL Server Remote Code Execution Vulnerability
EPSS 1.1%
High 8.4
CVE-2025-49695 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-49696 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-49697 Microsoft Office Remote Code Execution Vulnerability
High 8.1
CVE-2025-33054 Remote Desktop Spoofing Vulnerability
EPSS 1%
High 8.1
CVE-2025-49735 Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
EPSS 1.2%
High 8.0
CVE-2025-47178 Public exploit Microsoft Configuration Manager Remote Code Execution Vulnerability
EPSS 3%
High 8.0
CVE-2025-47972 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
High 8.0
CVE-2025-49691 Windows Miracast Wireless Display Remote Code Execution Vulnerability
High 7.8
CVE-2025-47987 Public exploit Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
EPSS 1.8%
High 7.8
CVE-2025-49683 Public exploit Microsoft Virtual Hard Disk Remote Code Execution Vulnerability
EPSS 2.1%
High 7.8
CVE-2025-49730 Public exploit Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-48799 Public exploit Windows Update Service Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.8
CVE-2025-47159 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47971 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47973 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47976 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47982 Windows Storage VSP Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47985 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47991 Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47993 Microsoft PC Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2025-47994 Microsoft Office Elevation of Privilege Vulnerability
EPSS 3.3%
High 7.8
CVE-2025-47996 Windows MBT Transport Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-48000 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-48805 Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
High 7.8
CVE-2025-48806 Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
High 7.8
CVE-2025-48815 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-48816 HID Class Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-48820 Windows AppX Deployment Service Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49659 Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49660 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49661 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49665 Workspace Broker Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49667 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49675 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49679 Windows Shell Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49686 Windows TCP/IP Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49689 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49693 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49694 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49698 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-49700 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-49702 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-49703 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-49705 Microsoft PowerPoint Remote Code Execution Vulnerability
High 7.8
CVE-2025-49711 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-49714 Visual Studio Code Python Extension Remote Code Execution Vulnerability
High 7.8
CVE-2025-49721 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49725 Windows Notification Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49726 Windows Notification Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49732 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49733 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49738 Microsoft PC Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49742 Windows Graphics Component Remote Code Execution Vulnerability
High 7.5
CVE-2025-47984 Windows GDI Information Disclosure Vulnerability
EPSS 23%
High 7.5
CVE-2025-47988 Azure Monitor Agent Remote Code Execution Vulnerability
EPSS 1%
High 7.5
CVE-2025-48814 Remote Desktop Licensing Service Security Feature Bypass Vulnerability
EPSS 1.3%
High 7.5
CVE-2025-49716 Windows Netlogon Denial of Service Vulnerability
EPSS 1.6%
High 7.5
CVE-2025-49718 Microsoft SQL Server Information Disclosure Vulnerability
EPSS 3.9%
High 7.5
CVE-2025-49719 Microsoft SQL Server Information Disclosure Vulnerability
EPSS 15%
High 7.4
CVE-2025-49690 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
High 7.3
CVE-2025-49680 Windows Performance Recorder (WPR) Denial of Service Vulnerability
High 7.3
CVE-2025-49682 Windows Media Elevation of Privilege Vulnerability
High 7.2
CVE-2025-49666 Public exploit Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability
EPSS 1.4%
High 7.1
CVE-2025-48819 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
High 7.1
CVE-2025-48821 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
High 7.0
CVE-2025-49677 Public exploit Microsoft Brokering File System Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.0
CVE-2025-49744 Public exploit Windows Graphics Component Elevation of Privilege Vulnerability
High 7.0
CVE-2025-47975 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
High 7.0
CVE-2025-49678 NTFS Elevation of Privilege Vulnerability
High 7.0
CVE-2025-49685 Windows Search Service Elevation of Privilege Vulnerability
High 7.0
CVE-2025-49699 Microsoft Office Remote Code Execution Vulnerability
High 7.0
CVE-2025-49727 Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2025-49737 Microsoft Teams Elevation of Privilege Vulnerability

Medium27 Show

Medium 6.5
CVE-2025-49706 Exploited Public exploit Microsoft SharePoint Server Spoofing Vulnerability
EPSS 99%
Medium 6.8
CVE-2025-48804 Public exploit Windows BitLocker Security Feature Bypass Vulnerability
Medium 6.8
CVE-2025-47999 Windows Hyper-V Denial of Service Vulnerability
Medium 6.8
CVE-2025-48001 Windows BitLocker Security Feature Bypass Vulnerability
Medium 6.8
CVE-2025-48003 Windows BitLocker Security Feature Bypass Vulnerability
Medium 6.8
CVE-2025-48800 Windows BitLocker Security Feature Bypass Vulnerability
Medium 6.8
CVE-2025-48818 Windows BitLocker Security Feature Bypass Vulnerability
Medium 6.7
CVE-2025-48803 Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
Medium 6.7
CVE-2025-48811 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Medium 6.5
CVE-2025-47978 Windows Kerberos Denial of Service Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2025-48802 Windows SMB Server Spoofing Vulnerability
Medium 6.5
CVE-2025-49670 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1%
Medium 6.5
CVE-2025-49671 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2025-49681 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 6.2
CVE-2025-47980 Windows Imaging Component Information Disclosure Vulnerability
Medium 6.0
CVE-2025-21195 Azure Service Fabric Runtime Elevation of Privilege Vulnerability
Medium 5.9
CVE-2025-48823 Windows Cryptographic Services Information Disclosure Vulnerability
Medium 5.7
CVE-2025-48002 Windows Hyper-V Information Disclosure Vulnerability
Medium 5.7
CVE-2025-49722 Windows Print Spooler Denial of Service Vulnerability
Medium 5.5
CVE-2025-26636 Windows Kernel Information Disclosure Vulnerability
Medium 5.5
CVE-2025-48808 Windows Kernel Information Disclosure Vulnerability
Medium 5.5
CVE-2025-48809 Windows Secure Kernel Mode Information Disclosure Vulnerability
Medium 5.5
CVE-2025-48810 Windows Secure Kernel Mode Information Disclosure Vulnerability
Medium 5.5
CVE-2025-48812 Microsoft Excel Information Disclosure Vulnerability
Medium 5.5
CVE-2025-49658 Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2025-49664 Windows User-Mode Driver Framework Host Information Disclosure Vulnerability
Medium 5.5
CVE-2025-49684 Windows Storage Port Driver Information Disclosure Vulnerability

Low3 Show

Low 3.5
CVE-2025-49760 Windows Storage Spoofing Vulnerability
EPSS 1.5%
Low 3.3
CVE-2025-49756 Office Developer Platform Security Feature Bypass Vulnerability
Low 3.1
CVE-2025-49731 Microsoft Teams Elevation of Privilege Vulnerability

Most affected products

Windows Server 2025 97 · 1 crit.
Windows Server 2025 (Server Core installation) 97 · 1 crit.
Windows Server 2022, 23H2 Edition (Server Core installation) 94 · 1 crit.
Windows Server 2022 91 · 1 crit.
Windows Server 2019 88 · 1 crit.
Windows Server 2019 (Server Core installation) 88 · 1 crit.
Windows Server 2016 82 · 1 crit.
Windows Server 2016 (Server Core installation) 82 · 1 crit.
Windows 11 Version 24H2 78 · 1 crit.
Windows 11 version 22H2 75 · 1 crit.
Windows 11 version 23H2 74 · 1 crit.
Windows 11 version 22H3 73 · 1 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (8 Jul). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →