# KB5058383: May 2025 cumulative update for Windows 10 1607 KB5058383, released May 13, 2025, fixes 38 CVEs across 4 products. 4 of them are being exploited (CVE-2025-30397); 4 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5058383 - Platform: Microsoft - Released: May 13, 2025 - Priority: Patch now (Closes CVE-2025-30397, exploited (CISA KEV)) - CVEs: 38, exploited: 4, on CISA KEV: 4 - Vendor advisory: https://support.microsoft.com/help/5058383 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 10 Version 1607 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-32-bit-systems.md) | | 14393.8066 | | [Windows 10 Version 1607 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-x64-based-systems.md) | | 14393.8066 | | [Windows Server 2016](https://patchblox.com/security/data/product/microsoft/windows-server-2016.md) | | 14393.8066 | | [Windows Server 2016 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2016-server-core-installation.md) | | 14393.8066 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-30397](https://patchblox.com/security/data/cve/CVE-2025-30397.md) | Patch now | Microsoft Scripting Engine | 7.5 | 0.2726 | CISA KEV | | [CVE-2025-32706](https://patchblox.com/security/data/cve/CVE-2025-32706.md) | Patch now | Windows Common Log File System Driver | 7.8 | 0.0233 | CISA KEV | | [CVE-2025-32709](https://patchblox.com/security/data/cve/CVE-2025-32709.md) | Patch now | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0182 | CISA KEV | | [CVE-2025-32701](https://patchblox.com/security/data/cve/CVE-2025-32701.md) | Patch now | Windows Common Log File System Driver | 7.8 | 0.0142 | CISA KEV | | [CVE-2025-30388](https://patchblox.com/security/data/cve/CVE-2025-30388.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0438 | More likely | | [CVE-2025-29966](https://patchblox.com/security/data/cve/CVE-2025-29966.md) | Urgent | Windows Remote Desktop | 8.8 | 0.0143 | | | [CVE-2025-29967](https://patchblox.com/security/data/cve/CVE-2025-29967.md) | Urgent | Remote Desktop Gateway Service | 8.8 | 0.0134 | | | [CVE-2025-32710](https://patchblox.com/security/data/cve/CVE-2025-32710.md) | Urgent | Windows Remote Desktop Services | 8.1 | 0.0108 | | | [CVE-2025-24063](https://patchblox.com/security/data/cve/CVE-2025-24063.md) | Urgent | Windows Kernel | 7.8 | 0.0072 | More likely | | [CVE-2025-30385](https://patchblox.com/security/data/cve/CVE-2025-30385.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0053 | More likely | | [CVE-2025-29833](https://patchblox.com/security/data/cve/CVE-2025-29833.md) | Urgent | Windows Virtual Machine Bus | 7.7 | 0.0046 | | | [CVE-2025-29962](https://patchblox.com/security/data/cve/CVE-2025-29962.md) | High | Windows Media | 8.8 | 0.1559 | | | [CVE-2025-26677](https://patchblox.com/security/data/cve/CVE-2025-26677.md) | High | Remote Desktop Gateway Service | 7.5 | 0.0180 | | | [CVE-2025-29969](https://patchblox.com/security/data/cve/CVE-2025-29969.md) | High | Windows Fundamentals | 7.5 | 0.0116 | | | [CVE-2025-29840](https://patchblox.com/security/data/cve/CVE-2025-29840.md) | High | Windows Media | 8.8 | 0.0104 | | | [CVE-2025-29831](https://patchblox.com/security/data/cve/CVE-2025-29831.md) | High | Remote Desktop Gateway Service | 7.5 | 0.0101 | | | [CVE-2025-47955](https://patchblox.com/security/data/cve/CVE-2025-47955.md) | High | Windows Remote Access Connection Manager | 7.8 | 0.0091 | | | [CVE-2025-32707](https://patchblox.com/security/data/cve/CVE-2025-32707.md) | High | Windows NTFS | 7.8 | 0.0056 | | | [CVE-2025-29842](https://patchblox.com/security/data/cve/CVE-2025-29842.md) | High | UrlMon | 7.5 | 0.0044 | | | [CVE-2025-27468](https://patchblox.com/security/data/cve/CVE-2025-27468.md) | High | Windows Secure Kernel Mode | 7.0 | 0.0026 | | | [CVE-2025-30394](https://patchblox.com/security/data/cve/CVE-2025-30394.md) | Routine | Remote Desktop Gateway Service | 5.9 | 0.3419 | | | [CVE-2025-29968](https://patchblox.com/security/data/cve/CVE-2025-29968.md) | Routine | Active Directory Certificate Services (AD CS) | 6.5 | 0.0203 | | | [CVE-2025-29959](https://patchblox.com/security/data/cve/CVE-2025-29959.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0153 | | | [CVE-2025-29960](https://patchblox.com/security/data/cve/CVE-2025-29960.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0153 | | | [CVE-2025-29954](https://patchblox.com/security/data/cve/CVE-2025-29954.md) | Routine | Windows LDAP - Lightweight Directory Access Protocol | 5.9 | 0.0148 | | | [CVE-2025-29958](https://patchblox.com/security/data/cve/CVE-2025-29958.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0145 | | | [CVE-2025-29961](https://patchblox.com/security/data/cve/CVE-2025-29961.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0145 | | | [CVE-2025-29836](https://patchblox.com/security/data/cve/CVE-2025-29836.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0141 | | | [CVE-2025-29830](https://patchblox.com/security/data/cve/CVE-2025-29830.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0138 | | | [CVE-2025-29832](https://patchblox.com/security/data/cve/CVE-2025-29832.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0138 | | | [CVE-2025-29835](https://patchblox.com/security/data/cve/CVE-2025-29835.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0138 | | | [CVE-2025-29956](https://patchblox.com/security/data/cve/CVE-2025-29956.md) | Routine | Windows SMB | 5.4 | 0.0112 | | | [CVE-2025-29974](https://patchblox.com/security/data/cve/CVE-2025-29974.md) | Routine | Windows Kernel | 5.7 | 0.0075 | | | [CVE-2025-29837](https://patchblox.com/security/data/cve/CVE-2025-29837.md) | Routine | Windows Installer | 5.5 | 0.0071 | | | [CVE-2025-29957](https://patchblox.com/security/data/cve/CVE-2025-29957.md) | Routine | Windows Deployment Services | 6.2 | 0.0064 | | | [CVE-2025-29829](https://patchblox.com/security/data/cve/CVE-2025-29829.md) | Routine | Windows Trusted Runtime Interface Driver | 5.5 | 0.0058 | | | [CVE-2025-29839](https://patchblox.com/security/data/cve/CVE-2025-29839.md) | Routine | Windows File Server | 4.0 | 0.0053 | | | [CVE-2025-55229](https://patchblox.com/security/data/cve/CVE-2025-55229.md) | Routine | Windows Certificates | 5.3 | 0.0051 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo