Microsoft’s June 2025 Patch Tuesday Addresses 65 CVEs (CVE-2025-33053)

1. 9Critical
2. 56Important
3. 0Moderate
4. 0Low

Microsoft addresses 65 CVEs, including two zero-day vulnerabilities, with one being exploited in the wild.

Microsoft addresses 65 CVEs in its June 2025 Patch Tuesday release, with nine rated critical, and 56 rated as important. Our counts omitted one vulnerability reported by CERT CC.

This month’s update includes patches for:

• .NET and Visual Studio
• App Control for Business (WDAC)
• Microsoft AutoUpdate (MAU)
• Microsoft Local Security Authority Server (lsasrv)
• Microsoft Office
• Microsoft Office Excel
• Microsoft Office Outlook
• Microsoft Office PowerPoint
• Microsoft Office SharePoint
• Microsoft Office Word
• Nuance Digital Engagement Platform
• Power Automate
• Remote Desktop Client
• Visual Studio
• WebDAV
• Windows Common Log File System Driver
• Windows Cryptographic Services
• Windows DHCP Server
• Windows DWM Core Library
• Windows Hello
• Windows Installer
• Windows KDC Proxy Service (KPSSVC)
• Windows Kernel
• Windows Local Security Authority (LSA)
• Windows Local Security Authority Subsystem Service (LSASS)
• Windows Media
• Windows Netlogon
• Windows Recovery Driver
• Windows Remote Access Connection Manager
• Windows Remote Desktop Services
• Windows Routing and Remote Access Service (RRAS)
• Windows SDK
• Windows SMB
• Windows Security App
• Windows Shell
• Windows Standards-Based Storage Management Service
• Windows Storage Management Provider
• Windows Storage Port Driver
• Windows Win32K GRFX

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.