Microsoft July 2025 Patch Tuesday fixes one zero-day, 137 flaws



Tag

CVE ID

CVE Title

Severity


AMD L1 Data Queue

CVE-2025-36357

AMD: CVE-2025-36357 Transient Scheduler Attack in L1 Data Queue

Critical


AMD Store Queue

CVE-2025-36350

AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue

Critical


Azure Monitor Agent

CVE-2025-47988

Azure Monitor Agent Remote Code Execution Vulnerability

Important


Capability Access Management Service (camsvc)

CVE-2025-49690

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

Important


HID class driver

CVE-2025-48816

HID Class Driver Elevation of Privilege Vulnerability

Important


Kernel Streaming WOW Thunk Service Driver

CVE-2025-49675

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Important


Microsoft Brokering File System

CVE-2025-49677

Microsoft Brokering File System Elevation of Privilege Vulnerability

Important


Microsoft Brokering File System

CVE-2025-49694

Microsoft Brokering File System Elevation of Privilege Vulnerability

Important


Microsoft Brokering File System

CVE-2025-49693

Microsoft Brokering File System Elevation of Privilege Vulnerability

Important


Microsoft Configuration Manager

CVE-2025-47178

Microsoft Configuration Manager Remote Code Execution Vulnerability

Important


Microsoft Graphics Component

CVE-2025-49732

Windows Graphics Component Elevation of Privilege Vulnerability

Important


Microsoft Graphics Component

CVE-2025-49742

Windows Graphics Component Remote Code Execution Vulnerability

Important


Microsoft Graphics Component

CVE-2025-49744

Windows Graphics Component Elevation of Privilege Vulnerability

Important


Microsoft Input Method Editor (IME)

CVE-2025-49687

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Important


Microsoft Input Method Editor (IME)

CVE-2025-47991

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Important


Microsoft Input Method Editor (IME)

CVE-2025-47972

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Important


Microsoft MPEG-2 Video Extension

CVE-2025-48806

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

Important


Microsoft MPEG-2 Video Extension

CVE-2025-48805

Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability

Important


Microsoft Office

CVE-2025-47994

Microsoft Office Elevation of Privilege Vulnerability

Important


Microsoft Office

CVE-2025-49697

Microsoft Office Remote Code Execution Vulnerability

Critical


Microsoft Office

CVE-2025-49695

Microsoft Office Remote Code Execution Vulnerability

Critical


Microsoft Office

CVE-2025-49696

Microsoft Office Remote Code Execution Vulnerability

Critical


Microsoft Office

CVE-2025-49699

Microsoft Office Remote Code Execution Vulnerability

Important


Microsoft Office

CVE-2025-49702

Microsoft Office Remote Code Execution Vulnerability

Critical


Microsoft Office Excel

CVE-2025-48812

Microsoft Excel Information Disclosure Vulnerability

Important


Microsoft Office Excel

CVE-2025-49711

Microsoft Excel Remote Code Execution Vulnerability

Important


Microsoft Office PowerPoint

CVE-2025-49705

Microsoft PowerPoint Remote Code Execution Vulnerability

Important


Microsoft Office SharePoint

CVE-2025-49701

Microsoft SharePoint Remote Code Execution Vulnerability

Important


Microsoft Office SharePoint

CVE-2025-49704

Microsoft SharePoint Remote Code Execution Vulnerability

Critical


Microsoft Office SharePoint

CVE-2025-49706

Microsoft SharePoint Server Spoofing Vulnerability

Important


Microsoft Office Word

CVE-2025-49703

Microsoft Word Remote Code Execution Vulnerability

Critical


Microsoft Office Word

CVE-2025-49698

Microsoft Word Remote Code Execution Vulnerability

Critical


Microsoft Office Word

CVE-2025-49700

Microsoft Word Remote Code Execution Vulnerability

Important


Microsoft PC Manager

CVE-2025-47993

Microsoft PC Manager Elevation of Privilege Vulnerability

Important


Microsoft PC Manager

CVE-2025-49738

Microsoft PC Manager Elevation of Privilege Vulnerability

Important


Microsoft Teams

CVE-2025-49731

Microsoft Teams Elevation of Privilege Vulnerability

Important


Microsoft Teams

CVE-2025-49737

Microsoft Teams Elevation of Privilege Vulnerability

Important


Microsoft Windows QoS scheduler

CVE-2025-49730

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Important


Microsoft Windows Search Component

CVE-2025-49685

Windows Search Service Elevation of Privilege Vulnerability

Important


Office Developer Platform

CVE-2025-49756

Office Developer Platform Security Feature Bypass Vulnerability

Important


Remote Desktop Client

CVE-2025-48817

Remote Desktop Client Remote Code Execution Vulnerability

Important


Remote Desktop Client

CVE-2025-33054

Remote Desktop Spoofing Vulnerability

Important


Role: Windows Hyper-V

CVE-2025-48822

Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability

Critical


Role: Windows Hyper-V

CVE-2025-47999

Windows Hyper-V Denial of Service Vulnerability

Important


Role: Windows Hyper-V

CVE-2025-48002

Windows Hyper-V Information Disclosure Vulnerability

Important


Service Fabric

CVE-2025-21195

Azure Service Fabric Runtime Elevation of Privilege Vulnerability

Important


SQL Server

CVE-2025-49719

Microsoft SQL Server Information Disclosure Vulnerability

Important


SQL Server

CVE-2025-49718

Microsoft SQL Server Information Disclosure Vulnerability

Important


SQL Server

CVE-2025-49717

Microsoft SQL Server Remote Code Execution Vulnerability

Critical


Storage Port Driver

CVE-2025-49684

Windows Storage Port Driver Information Disclosure Vulnerability

Important


Universal Print Management Service

CVE-2025-47986

Universal Print Management Service Elevation of Privilege Vulnerability

Important


Virtual Hard Disk (VHDX)

CVE-2025-47971

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Important


Virtual Hard Disk (VHDX)

CVE-2025-49689

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Important


Virtual Hard Disk (VHDX)

CVE-2025-49683

Microsoft Virtual Hard Disk Remote Code Execution Vulnerability

Low


Virtual Hard Disk (VHDX)

CVE-2025-47973

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Important


Visual Studio

CVE-2025-49739

Visual Studio Elevation of Privilege Vulnerability

Important


Visual Studio

CVE-2025-27614

MITRE: CVE-2025-27614 Gitk Arbitrary Code Execution Vulnerability

Unknown


Visual Studio

CVE-2025-27613

MITRE: CVE-2025-27613 Gitk Arguments Vulnerability

Unknown


Visual Studio

CVE-2025-46334

MITRE: CVE-2025-46334 Git Malicious Shell Vulnerability

Unknown


Visual Studio

CVE-2025-46835

MITRE: CVE-2025-46835 Git File Overwrite Vulnerability

Unknown


Visual Studio

CVE-2025-48384

MITRE: CVE-2025-48384 Git Symlink Vulnerability

Unknown


Visual Studio

CVE-2025-48386

MITRE: CVE-2025-48386 Git Credential Helper Vulnerability

Unknown


Visual Studio

CVE-2025-48385

MITRE: CVE-2025-48385 Git Protocol Injection Vulnerability

Unknown


Visual Studio Code – Python extension

CVE-2025-49714

Visual Studio Code Python Extension Remote Code Execution Vulnerability

Important


Windows Ancillary Function Driver for WinSock

CVE-2025-49661

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Important


Windows AppX Deployment Service

CVE-2025-48820

Windows AppX Deployment Service Elevation of Privilege Vulnerability

Important


Windows BitLocker

CVE-2025-48818

BitLocker Security Feature Bypass Vulnerability

Important


Windows BitLocker

CVE-2025-48001

BitLocker Security Feature Bypass Vulnerability

Important


Windows BitLocker

CVE-2025-48804

BitLocker Security Feature Bypass Vulnerability

Important


Windows BitLocker

CVE-2025-48003

BitLocker Security Feature Bypass Vulnerability

Important


Windows BitLocker

CVE-2025-48800

BitLocker Security Feature Bypass Vulnerability

Important


Windows Connected Devices Platform Service

CVE-2025-48000

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Important


Windows Connected Devices Platform Service

CVE-2025-49724

Windows Connected Devices Platform Service Remote Code Execution Vulnerability

Important


Windows Cred SSProvider Protocol

CVE-2025-47987

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

Important


Windows Cryptographic Services

CVE-2025-48823

Windows Cryptographic Services Information Disclosure Vulnerability

Important


Windows Event Tracing

CVE-2025-47985

Windows Event Tracing Elevation of Privilege Vulnerability

Important


Windows Event Tracing

CVE-2025-49660

Windows Event Tracing Elevation of Privilege Vulnerability

Important


Windows Fast FAT Driver

CVE-2025-49721

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Important


Windows GDI

CVE-2025-47984

Windows GDI Information Disclosure Vulnerability

Important


Windows Imaging Component

CVE-2025-47980

Windows Imaging Component Information Disclosure Vulnerability

Critical


Windows KDC Proxy Service (KPSSVC)

CVE-2025-49735

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

Critical


Windows Kerberos

CVE-2025-47978

Windows Kerberos Denial of Service Vulnerability

Important


Windows Kernel

CVE-2025-49666

Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability

Important


Windows Kernel

CVE-2025-26636

Windows Kernel Information Disclosure Vulnerability

Important


Windows Kernel

CVE-2025-48809

Windows Secure Kernel Mode Information Disclosure Vulnerability

Important


Windows Kernel

CVE-2025-48808

Windows Kernel Information Disclosure Vulnerability

Important


Windows MBT Transport driver

CVE-2025-47996

Windows MBT Transport Driver Elevation of Privilege Vulnerability

Important


Windows Media

CVE-2025-49682

Windows Media Elevation of Privilege Vulnerability

Important


Windows Media

CVE-2025-49691

Windows Miracast Wireless Display Remote Code Execution Vulnerability

Important


Windows Netlogon

CVE-2025-49716

Windows Netlogon Denial of Service Vulnerability

Important


Windows Notification

CVE-2025-49726

Windows Notification Elevation of Privilege Vulnerability

Important


Windows Notification

CVE-2025-49725

Windows Notification Elevation of Privilege Vulnerability

Important


Windows NTFS

CVE-2025-49678

NTFS Elevation of Privilege Vulnerability

Important


Windows Performance Recorder

CVE-2025-49680

Windows Performance Recorder (WPR) Denial of Service Vulnerability

Important


Windows Print Spooler Components

CVE-2025-49722

Windows Print Spooler Denial of Service Vulnerability

Important


Windows Remote Desktop Licensing Service

CVE-2025-48814

Remote Desktop Licensing Service Security Feature Bypass Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49688

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49676

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49672

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49670

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49671

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49753

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49729

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49673

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49674

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49669

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49663

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49668

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49681

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-49657

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-47998

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Routing and Remote Access Service (RRAS)

CVE-2025-48824

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Important


Windows Secure Kernel Mode

CVE-2025-48810

Windows Secure Kernel Mode Information Disclosure Vulnerability

Important


Windows Shell

CVE-2025-49679

Windows Shell Elevation of Privilege Vulnerability

Important


Windows SmartScreen

CVE-2025-49740

Windows SmartScreen Security Feature Bypass Vulnerability

Important


Windows SMB

CVE-2025-48802

Windows SMB Server Spoofing Vulnerability

Important


Windows SPNEGO Extended Negotiation

CVE-2025-47981

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Critical


Windows SSDP Service

CVE-2025-47976

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Important


Windows SSDP Service

CVE-2025-47975

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Important


Windows SSDP Service

CVE-2025-48815

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Important


Windows StateRepository API

CVE-2025-49723

Windows StateRepository API Server file Tampering Vulnerability

Important


Windows Storage

CVE-2025-49760

Windows Storage Spoofing Vulnerability

Moderate


Windows Storage VSP Driver

CVE-2025-47982

Windows Storage VSP Driver Elevation of Privilege Vulnerability

Important


Windows TCP/IP

CVE-2025-49686

Windows TCP/IP Driver Elevation of Privilege Vulnerability

Important


Windows TDX.sys

CVE-2025-49658

Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability

Important


Windows TDX.sys

CVE-2025-49659

Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability

Important


Windows Universal Plug and Play (UPnP) Device Host

CVE-2025-48821

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Important


Windows Universal Plug and Play (UPnP) Device Host

CVE-2025-48819

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Important


Windows Update Service

CVE-2025-48799

Windows Update Service Elevation of Privilege Vulnerability

Important


Windows User-Mode Driver Framework Host

CVE-2025-49664

Windows User-Mode Driver Framework Host Information Disclosure Vulnerability

Important


Windows Virtualization-Based Security (VBS) Enclave

CVE-2025-47159

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

Important


Windows Virtualization-Based Security (VBS) Enclave

CVE-2025-48811

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Important


Windows Virtualization-Based Security (VBS) Enclave

CVE-2025-48803

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

Important


Windows Win32K – GRFX

CVE-2025-49727

Win32k Elevation of Privilege Vulnerability

Important


Windows Win32K – ICOMP

CVE-2025-49733

Win32k Elevation of Privilege Vulnerability

Important


Windows Win32K – ICOMP

CVE-2025-49667

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Important


Workspace Broker

CVE-2025-49665

Workspace Broker Elevation of Privilege Vulnerability

Important



Source link


Leave a Reply

Your email address will not be published. Required fields are marked *