Out of 130 vulnerabilities, Microsoft fixes 41 Remote Code Execution, 53 Elevation of Privilege, 18 Information Disclosure, 5 Denial of Service, 4 Spoofing, 1 Data Tampering vulnerability, and 8 Security Feature Bypass issues. These vulnerabilities span various Microsoft products and services, including Windows Kernel, Remote Desktop Client, Microsoft Office, Windows BitLocker, and Windows Routing and Remote Access Service (RRAS). Remote Code Execution (RCE) Vulnerabilities A significant portion of the vulnerabilities—55 CVEs—could potentially lead to remote code execution, allowing attackers to run arbitrary code on affected systems. Microsoft released patch Tuesday June 2025 as a monthly security update, addressing a total of 130 Microsoft Common Vulnerabilities and Exposures (CVEs) and republishing 10 non-Microsoft CVEs. The update covers a wide range of products and services, including Windows, Microsoft Office, SQL Server, Microsoft Edge (Chromium-based), and Visual Studio, among others. This release includes critical and important vulnerabilities, with several allowing remote code execution (RCE). CVE-2025-49717 (SQL Server, CVSS 8.5): This vulnerability could allow attackers to execute code remotely with significant impact on affected systems. Actively Exploited or Zero-Day Vulnerabilities Microsoft confirmed that no vulnerabilities in this update are actively exploited or classified as zero-day vulnerabilities.
This Cyber News was published on cybersecuritynews.com. Publication date: Tue, 08 Jul 2025 17:25:16 +0000