# KB5060842: June 2025 cumulative update for Windows Server 2025 KB5060842, released June 10, 2025, fixes 40 CVEs across 4 products. 2 of them are being exploited (CVE-2025-33053); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5060842 - Platform: Microsoft - Released: Jun 10, 2025 - Priority: Patch now (Closes CVE-2025-33053, exploited (CISA KEV)) - CVEs: 40, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5060842 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 11 Version 24H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-24h2-for-arm64-based-systems.md) | | 26100.4349 | | [Windows 11 Version 24H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-24h2-for-x64-based-systems.md) | | 26100.4349 | | [Windows Server 2025](https://patchblox.com/security/data/product/microsoft/windows-server-2025.md) | | 26100.4349 | | [Windows Server 2025 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2025-server-core-installation.md) | | 26100.4349 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-33053](https://patchblox.com/security/data/cve/CVE-2025-33053.md) | Patch now | Internet Shortcut Files | 8.8 | 0.8714 | CISA KEV | | [CVE-2025-33073](https://patchblox.com/security/data/cve/CVE-2025-33073.md) | Patch now | Windows SMB | 8.8 | 0.8283 | CISA KEV, Disclosed | | [CVE-2025-33071](https://patchblox.com/security/data/cve/CVE-2025-33071.md) | Urgent | Windows KDC Proxy Service (KPSSVC) | 8.1 | 0.2337 | More likely | | [CVE-2025-33070](https://patchblox.com/security/data/cve/CVE-2025-33070.md) | Urgent | Windows Netlogon | 8.1 | 0.1031 | More likely | | [CVE-2025-32714](https://patchblox.com/security/data/cve/CVE-2025-32714.md) | Urgent | Windows Installer | 7.8 | 0.0141 | More likely | | [CVE-2025-29828](https://patchblox.com/security/data/cve/CVE-2025-29828.md) | Urgent | Windows Cryptographic Services | 8.1 | 0.0127 | | | [CVE-2025-49735](https://patchblox.com/security/data/cve/CVE-2025-49735.md) | Urgent | Windows KDC Proxy Service (KPSSVC) | 8.1 | 0.0120 | More likely | | [CVE-2025-32713](https://patchblox.com/security/data/cve/CVE-2025-32713.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0080 | More likely | | [CVE-2025-33050](https://patchblox.com/security/data/cve/CVE-2025-33050.md) | High | Windows DHCP Server | 7.5 | 0.0194 | | | [CVE-2025-32724](https://patchblox.com/security/data/cve/CVE-2025-32724.md) | High | Windows Local Security Authority Subsystem Service (LSASS) | 7.5 | 0.0190 | | | [CVE-2025-32725](https://patchblox.com/security/data/cve/CVE-2025-32725.md) | High | Windows DHCP Server | 7.5 | 0.0190 | | | [CVE-2025-33068](https://patchblox.com/security/data/cve/CVE-2025-33068.md) | High | Windows Standards-Based Storage Management Service | 7.5 | 0.0190 | | | [CVE-2025-33056](https://patchblox.com/security/data/cve/CVE-2025-33056.md) | High | Microsoft Local Security Authority Server (lsasrv) | 7.5 | 0.0180 | | | [CVE-2025-33064](https://patchblox.com/security/data/cve/CVE-2025-33064.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0139 | | | [CVE-2025-33066](https://patchblox.com/security/data/cve/CVE-2025-33066.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0113 | | | [CVE-2025-32721](https://patchblox.com/security/data/cve/CVE-2025-32721.md) | High | Windows Recovery Driver | 7.3 | 0.0069 | | | [CVE-2025-33075](https://patchblox.com/security/data/cve/CVE-2025-33075.md) | High | Windows Installer | 7.8 | 0.0064 | | | [CVE-2025-32712](https://patchblox.com/security/data/cve/CVE-2025-32712.md) | High | Windows Win32K - GRFX | 7.8 | 0.0051 | | | [CVE-2025-32718](https://patchblox.com/security/data/cve/CVE-2025-32718.md) | High | Windows SMB | 7.8 | 0.0051 | | | [CVE-2025-33067](https://patchblox.com/security/data/cve/CVE-2025-33067.md) | High | Windows Kernel | 8.4 | 0.0047 | | | [CVE-2025-33057](https://patchblox.com/security/data/cve/CVE-2025-33057.md) | Routine | Windows Local Security Authority (LSA) | 6.5 | 0.0193 | | | [CVE-2025-32715](https://patchblox.com/security/data/cve/CVE-2025-32715.md) | Routine | Remote Desktop Client | 6.5 | 0.0156 | | | [CVE-2025-32722](https://patchblox.com/security/data/cve/CVE-2025-32722.md) | Routine | Windows Storage Port Driver | 5.5 | 0.0117 | | | [CVE-2025-47160](https://patchblox.com/security/data/cve/CVE-2025-47160.md) | Routine | Windows Shell | 5.4 | 0.0087 | | | [CVE-2025-32720](https://patchblox.com/security/data/cve/CVE-2025-32720.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0072 | | | [CVE-2025-33055](https://patchblox.com/security/data/cve/CVE-2025-33055.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0065 | | | [CVE-2025-33062](https://patchblox.com/security/data/cve/CVE-2025-33062.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0065 | | | [CVE-2025-24069](https://patchblox.com/security/data/cve/CVE-2025-24069.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33052](https://patchblox.com/security/data/cve/CVE-2025-33052.md) | Routine | Windows DWM Core Library | 5.5 | 0.0063 | | | [CVE-2025-33058](https://patchblox.com/security/data/cve/CVE-2025-33058.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33059](https://patchblox.com/security/data/cve/CVE-2025-33059.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33060](https://patchblox.com/security/data/cve/CVE-2025-33060.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33061](https://patchblox.com/security/data/cve/CVE-2025-33061.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33063](https://patchblox.com/security/data/cve/CVE-2025-33063.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-33065](https://patchblox.com/security/data/cve/CVE-2025-33065.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0063 | | | [CVE-2025-24065](https://patchblox.com/security/data/cve/CVE-2025-24065.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0061 | | | [CVE-2025-24068](https://patchblox.com/security/data/cve/CVE-2025-24068.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0057 | | | [CVE-2025-32719](https://patchblox.com/security/data/cve/CVE-2025-32719.md) | Routine | Windows Storage Management Provider | 5.5 | 0.0057 | | | [CVE-2025-3052](https://patchblox.com/security/data/cve/CVE-2025-3052.md) | Routine | Windows Secure Boot | 6.7 | 0.0042 | | | [CVE-2025-33069](https://patchblox.com/security/data/cve/CVE-2025-33069.md) | Routine | App Control for Business (WDAC) | 5.1 | 0.0032 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo