# KB5060118: June 2025 cumulative update for Windows Server 23H2 KB5060118, released June 10, 2025, fixes 39 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1665). 2 of them are being exploited (CVE-2025-33053); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5060118 - Platform: Microsoft - Released: Jun 10, 2025 - Priority: Patch now (Closes CVE-2025-33053, exploited (CISA KEV)) - CVEs: 39, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5060118 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022, 23H2 Edition (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-23h2-edition-server-core-installation.md) | | 25398.1665 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-33053](https://patchblox.com/security/data/cve/CVE-2025-33053.md) | Patch now | Internet Shortcut Files | 8.8 | 0.8714 | CISA KEV | | [CVE-2025-33073](https://patchblox.com/security/data/cve/CVE-2025-33073.md) | Patch now | Windows SMB | 8.8 | 0.8283 | CISA KEV, Disclosed | | [CVE-2025-33071](https://patchblox.com/security/data/cve/CVE-2025-33071.md) | Urgent | Windows KDC Proxy Service (KPSSVC) | 8.1 | 0.2337 | More likely | | [CVE-2025-33070](https://patchblox.com/security/data/cve/CVE-2025-33070.md) | Urgent | Windows Netlogon | 8.1 | 0.1031 | More likely | | [CVE-2025-32714](https://patchblox.com/security/data/cve/CVE-2025-32714.md) | Urgent | Windows Installer | 7.8 | 0.0141 | More likely | | [CVE-2025-29828](https://patchblox.com/security/data/cve/CVE-2025-29828.md) | Urgent | Windows Cryptographic Services | 8.1 | 0.0127 | | | [CVE-2025-49735](https://patchblox.com/security/data/cve/CVE-2025-49735.md) | Urgent | Windows KDC Proxy Service (KPSSVC) | 8.1 | 0.0120 | More likely | | [CVE-2025-32713](https://patchblox.com/security/data/cve/CVE-2025-32713.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0080 | More likely | | [CVE-2025-33050](https://patchblox.com/security/data/cve/CVE-2025-33050.md) | High | Windows DHCP Server | 7.5 | 0.0194 | | | [CVE-2025-32724](https://patchblox.com/security/data/cve/CVE-2025-32724.md) | High | Windows Local Security Authority Subsystem Service (LSASS) | 7.5 | 0.0190 | | | [CVE-2025-32725](https://patchblox.com/security/data/cve/CVE-2025-32725.md) | High | Windows DHCP Server | 7.5 | 0.0190 | | | [CVE-2025-33056](https://patchblox.com/security/data/cve/CVE-2025-33056.md) | High | Microsoft Local Security Authority Server (lsasrv) | 7.5 | 0.0180 | | | [CVE-2025-33064](https://patchblox.com/security/data/cve/CVE-2025-33064.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0139 | | | [CVE-2025-33066](https://patchblox.com/security/data/cve/CVE-2025-33066.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0113 | | | [CVE-2025-32721](https://patchblox.com/security/data/cve/CVE-2025-32721.md) | High | Windows Recovery Driver | 7.3 | 0.0069 | | | [CVE-2025-33075](https://patchblox.com/security/data/cve/CVE-2025-33075.md) | High | Windows Installer | 7.8 | 0.0064 | | | [CVE-2025-32712](https://patchblox.com/security/data/cve/CVE-2025-32712.md) | High | Windows Win32K - GRFX | 7.8 | 0.0051 | | | [CVE-2025-32716](https://patchblox.com/security/data/cve/CVE-2025-32716.md) | High | Windows Media | 7.8 | 0.0051 | | | [CVE-2025-32718](https://patchblox.com/security/data/cve/CVE-2025-32718.md) | High | Windows SMB | 7.8 | 0.0051 | | | [CVE-2025-33067](https://patchblox.com/security/data/cve/CVE-2025-33067.md) | High | Windows Kernel | 8.4 | 0.0047 | | | [CVE-2025-33057](https://patchblox.com/security/data/cve/CVE-2025-33057.md) | Routine | Windows Local Security Authority (LSA) | 6.5 | 0.0193 | | | [CVE-2025-32715](https://patchblox.com/security/data/cve/CVE-2025-32715.md) | Routine | Remote Desktop Client | 6.5 | 0.0156 | | | [CVE-2025-32722](https://patchblox.com/security/data/cve/CVE-2025-32722.md) | Routine | Windows Storage Port Driver | 5.5 | 0.0117 | | | [CVE-2025-47160](https://patchblox.com/security/data/cve/CVE-2025-47160.md) | Routine | Windows Shell | 5.4 | 0.0087 | | | [CVE-2025-32720](https://patchblox.com/security/data/cve/CVE-2025-32720.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0072 | | | [CVE-2025-33055](https://patchblox.com/security/data/cve/CVE-2025-33055.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0065 | | | [CVE-2025-33062](https://patchblox.com/security/data/cve/CVE-2025-33062.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0065 | | | [CVE-2025-24069](https://patchblox.com/security/data/cve/CVE-2025-24069.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33052](https://patchblox.com/security/data/cve/CVE-2025-33052.md) | Routine | Windows DWM Core Library | 5.5 | 0.0063 | | | [CVE-2025-33058](https://patchblox.com/security/data/cve/CVE-2025-33058.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33059](https://patchblox.com/security/data/cve/CVE-2025-33059.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33060](https://patchblox.com/security/data/cve/CVE-2025-33060.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33061](https://patchblox.com/security/data/cve/CVE-2025-33061.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33063](https://patchblox.com/security/data/cve/CVE-2025-33063.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33065](https://patchblox.com/security/data/cve/CVE-2025-33065.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-24065](https://patchblox.com/security/data/cve/CVE-2025-24065.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0061 | | | [CVE-2025-24068](https://patchblox.com/security/data/cve/CVE-2025-24068.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0057 | | | [CVE-2025-32719](https://patchblox.com/security/data/cve/CVE-2025-32719.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0057 | | | [CVE-2025-3052](https://patchblox.com/security/data/cve/CVE-2025-3052.md) | Routine | Windows Secure Boot | 6.7 | 0.0042 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo