Microsoft Patch Tuesday — August 2025

Tuesday, 12 August 2025

Vulnerabilities: 106
Critical: 3
High: 78
Zero-days: 0
Public exploit: 8

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 3

Critical 9.8
CVE-2025-50165 Public exploit Windows Graphics Component Remote Code Execution Vulnerability
EPSS 11%
Critical 9.8
CVE-2025-53766 GDI+ Remote Code Execution Vulnerability
EPSS 8.5%
Critical 9.1
CVE-2025-50171 Remote Desktop Spoofing Vulnerability
EPSS 1%

Public exploit code 7

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2025-24999 Public exploit Microsoft SQL Server Elevation of Privilege Vulnerability
EPSS 1.8%
High 8.8
CVE-2025-53772 Public exploit Web Deploy Remote Code Execution Vulnerability
EPSS 28%
High 7.8
CVE-2025-50168 Public exploit Win32k Elevation of Privilege Vulnerability
High 7.5
CVE-2025-53783 Public exploit Microsoft Teams Remote Code Execution Vulnerability
High 7.2
CVE-2025-53779 Public exploit Windows Kerberos Elevation of Privilege Vulnerability
EPSS 2.7%
Medium 6.5
CVE-2025-50154 Public exploit Microsoft Windows File Explorer Spoofing Vulnerability
EPSS 32%
Medium 5.5
CVE-2025-53136 Public exploit NT OS Kernel Information Disclosure Vulnerability

All vulnerabilities 106

Critical3 Show

Critical 9.8
CVE-2025-50165 Public exploit Windows Graphics Component Remote Code Execution Vulnerability
EPSS 11%
Critical 9.8
CVE-2025-53766 GDI+ Remote Code Execution Vulnerability
EPSS 8.5%
Critical 9.1
CVE-2025-50171 Remote Desktop Spoofing Vulnerability
EPSS 1%

High78 Show

High 8.8
CVE-2025-24999 Public exploit Microsoft SQL Server Elevation of Privilege Vulnerability
EPSS 1.8%
High 8.8
CVE-2025-53772 Public exploit Web Deploy Remote Code Execution Vulnerability
EPSS 28%
High 8.8
CVE-2025-47954 Microsoft SQL Server Elevation of Privilege Vulnerability
EPSS 1.6%
High 8.8
CVE-2025-49712 Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 21%
High 8.8
CVE-2025-49757 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1%
High 8.8
CVE-2025-49758 Microsoft SQL Server Elevation of Privilege Vulnerability
EPSS 1%
High 8.8
CVE-2025-49759 Microsoft SQL Server Elevation of Privilege Vulnerability
EPSS 1.2%
High 8.8
CVE-2025-50163 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.8
CVE-2025-53131 Windows Media Remote Code Execution Vulnerability
High 8.8
CVE-2025-53143 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 9%
High 8.8
CVE-2025-53144 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 8.5%
High 8.8
CVE-2025-53145 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 8.5%
High 8.8
CVE-2025-53727 Microsoft SQL Server Elevation of Privilege Vulnerability
EPSS 1.3%
High 8.8
CVE-2025-53778 Windows NTLM Elevation of Privilege Vulnerability
EPSS 52%
High 8.4
CVE-2025-53731 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-53733 Microsoft Word Remote Code Execution Vulnerability
High 8.4
CVE-2025-53740 Microsoft Office Remote Code Execution Vulnerability
High 8.4
CVE-2025-53784 Microsoft Word Remote Code Execution Vulnerability
High 8.1
CVE-2025-50177 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 4.6%
High 8.0
CVE-2025-50160 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.0
CVE-2025-50162 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.0
CVE-2025-50164 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 8.0
CVE-2025-53720 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 7.9
CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability
High 7.8
CVE-2025-50168 Public exploit Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2025-49761 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2025-50153 Desktop Window Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2025-50155 Windows Push Notifications Apps Elevation of Privilege Vulnerability
High 7.8
CVE-2025-50170 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-50173 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2025-50176 DirectX Graphics Kernel Remote Code Execution Vulnerability
High 7.8
CVE-2025-53132 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53133 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53141 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53149 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53151 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53152 Desktop Windows Manager Remote Code Execution Vulnerability
High 7.8
CVE-2025-53154 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53155 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53723 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53724 Windows Push Notifications Apps Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53725 Windows Push Notifications Apps Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53726 Windows Push Notifications Apps Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53729 Microsoft Azure File Sync Elevation of Privilege Vulnerability
High 7.8
CVE-2025-53730 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2025-53732 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2025-53734 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2025-53735 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-53737 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-53738 Microsoft Word Remote Code Execution Vulnerability
High 7.8
CVE-2025-53739 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-53741 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-53759 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2025-53761 Microsoft PowerPoint Remote Code Execution Vulnerability
High 7.8
CVE-2025-53773 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability
EPSS 3.3%
High 7.8
CVE-2025-53789 Windows StateRepository API Server file Elevation of Privilege Vulnerability
High 7.7
CVE-2025-53781 Azure Virtual Machines Information Disclosure Vulnerability
EPSS 1.2%
High 7.5
CVE-2025-53783 Public exploit Microsoft Teams Remote Code Execution Vulnerability
High 7.5
CVE-2025-33051 Microsoft Exchange Server Information Disclosure Vulnerability
EPSS 1.4%
High 7.5
CVE-2025-50169 Windows SMB Remote Code Execution Vulnerability
High 7.5
CVE-2025-53722 Windows Remote Desktop Services Denial of Service Vulnerability
EPSS 23%
High 7.5
CVE-2025-53793 Azure Stack Hub Information Disclosure Vulnerability
EPSS 1.4%
High 7.3
CVE-2025-50159 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability
High 7.3
CVE-2025-50161 Win32k Elevation of Privilege Vulnerability
High 7.2
CVE-2025-53779 Public exploit Windows Kerberos Elevation of Privilege Vulnerability
EPSS 2.7%
High 7.1
CVE-2025-53760 Microsoft SharePoint Elevation of Privilege Vulnerability
EPSS 21%
High 7.0
CVE-2025-49762 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2025-50158 Windows NTFS Information Disclosure Vulnerability
High 7.0
CVE-2025-50167 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53134 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53135 DirectX Graphics Kernel Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53137 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53140 Windows Kernel Transaction Manager Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53142 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53147 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53718 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53721 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
High 7.0
CVE-2025-53788 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

Medium25 Show

Medium 6.8
CVE-2025-49751 Windows Hyper-V Denial of Service Vulnerability
Medium 6.8
CVE-2025-53736 Microsoft Word Information Disclosure Vulnerability
Medium 6.7
CVE-2025-48807 Windows Hyper-V Remote Code Execution Vulnerability
Medium 6.7
CVE-2025-49743 Windows Graphics Component Elevation of Privilege Vulnerability
Medium 6.5
CVE-2025-50154 Public exploit Microsoft Windows File Explorer Spoofing Vulnerability
EPSS 32%
Medium 6.5
CVE-2025-25005 Microsoft Exchange Server Tampering Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2025-50166 Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability
EPSS 1.4%
Medium 6.5
CVE-2025-50172 DirectX Graphics Kernel Denial of Service Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2025-53716 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2025-53728 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.7
CVE-2025-50156 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.7
CVE-2025-50157 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.7
CVE-2025-53138 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.7
CVE-2025-53148 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.7
CVE-2025-53153 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.7
CVE-2025-53719 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2025-53136 Public exploit NT OS Kernel Information Disclosure Vulnerability
Medium 5.5
CVE-2025-53156 Windows Storage Port Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2025-53769 Windows Security App Spoofing Vulnerability
Medium 5.4
CVE-2025-49745 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Medium 5.3
CVE-2025-25006 Microsoft Exchange Server Spoofing Vulnerability
Medium 5.3
CVE-2025-25007 Microsoft Exchange Server Spoofing Vulnerability
Medium 4.4
CVE-2025-53765 Azure Stack Hub Information Disclosure Vulnerability
Medium 4.3
CVE-2025-49736 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Medium 4.3
CVE-2025-49755 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

Most affected products

Windows Server 2025 64 · 3 crit.
Windows Server 2025 (Server Core installation) 64 · 3 crit.
Windows Server 2022, 23H2 Edition (Server Core installation) 60 · 2 crit.
Windows Server 2022 59 · 2 crit.
Windows Server 2019 57 · 1 crit.
Windows Server 2019 (Server Core installation) 57 · 1 crit.
Windows 11 Version 24H2 51 · 3 crit.
Windows Server 2016 51 · 1 crit.
Windows Server 2016 (Server Core installation) 51 · 1 crit.
Windows 11 version 23H2 49 · 2 crit.
Windows 11 version 22H2 49 · 2 crit.
Windows 11 version 22H3 49 · 2 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (12 Aug). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →