# KB5062597: July 2025 security update KB5062597, released July 8, 2025, fixes 63 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/microsoft/kb5062597 - Platform: Microsoft - Released: Jul 8, 2025 - Priority: Urgent (Closes CVE-2025-47981, exploitation more likely) - CVEs: 63, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5062597 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2012 R2](https://patchblox.com/security/data/product/microsoft/windows-server-2012-r2.md) | | | | [Windows Server 2012 R2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2012-r2-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-47981](https://patchblox.com/security/data/cve/CVE-2025-47981.md) | Urgent | Windows SPNEGO Extended Negotiation | 9.8 | 0.4112 | More likely | | [CVE-2025-47987](https://patchblox.com/security/data/cve/CVE-2025-47987.md) | Urgent | Windows Cred SSProvider Protocol | 7.8 | 0.0179 | More likely | | [CVE-2025-47980](https://patchblox.com/security/data/cve/CVE-2025-47980.md) | Urgent | Windows Imaging Component | 6.2 | 0.0067 | | | [CVE-2025-48804](https://patchblox.com/security/data/cve/CVE-2025-48804.md) | Urgent | Windows BitLocker | 6.8 | 0.0065 | More likely | | [CVE-2025-48001](https://patchblox.com/security/data/cve/CVE-2025-48001.md) | Urgent | Windows BitLocker | 6.8 | 0.0044 | More likely | | [CVE-2025-49727](https://patchblox.com/security/data/cve/CVE-2025-49727.md) | Urgent | Windows Win32K - GRFX | 7.0 | 0.0041 | More likely | | [CVE-2025-47984](https://patchblox.com/security/data/cve/CVE-2025-47984.md) | High | Windows GDI | 7.5 | 0.2327 | | | [CVE-2025-49683](https://patchblox.com/security/data/cve/CVE-2025-49683.md) | High | Virtual Hard Disk (VHDX) | 7.8 | 0.0206 | | | [CVE-2025-49716](https://patchblox.com/security/data/cve/CVE-2025-49716.md) | High | Windows Netlogon | 7.5 | 0.0163 | | | [CVE-2025-48814](https://patchblox.com/security/data/cve/CVE-2025-48814.md) | High | Windows Remote Desktop Licensing Service | 7.5 | 0.0127 | | | [CVE-2025-48817](https://patchblox.com/security/data/cve/CVE-2025-48817.md) | High | Remote Desktop Client | 8.8 | 0.0114 | | | [CVE-2025-49657](https://patchblox.com/security/data/cve/CVE-2025-49657.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0113 | | | [CVE-2025-48824](https://patchblox.com/security/data/cve/CVE-2025-48824.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0107 | | | [CVE-2025-47998](https://patchblox.com/security/data/cve/CVE-2025-47998.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0107 | | | [CVE-2025-49757](https://patchblox.com/security/data/cve/CVE-2025-49757.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0102 | | | [CVE-2025-49672](https://patchblox.com/security/data/cve/CVE-2025-49672.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0099 | | | [CVE-2025-49676](https://patchblox.com/security/data/cve/CVE-2025-49676.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0099 | | | [CVE-2025-49688](https://patchblox.com/security/data/cve/CVE-2025-49688.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0099 | | | [CVE-2025-49663](https://patchblox.com/security/data/cve/CVE-2025-49663.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0092 | | | [CVE-2025-49668](https://patchblox.com/security/data/cve/CVE-2025-49668.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0092 | | | [CVE-2025-49669](https://patchblox.com/security/data/cve/CVE-2025-49669.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0092 | | | [CVE-2025-49673](https://patchblox.com/security/data/cve/CVE-2025-49673.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0092 | | | [CVE-2025-49753](https://patchblox.com/security/data/cve/CVE-2025-49753.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0092 | | | [CVE-2025-49674](https://patchblox.com/security/data/cve/CVE-2025-49674.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0089 | | | [CVE-2025-49689](https://patchblox.com/security/data/cve/CVE-2025-49689.md) | High | Virtual Hard Disk (VHDX) | 7.8 | 0.0071 | | | [CVE-2025-49729](https://patchblox.com/security/data/cve/CVE-2025-49729.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0071 | | | [CVE-2025-49730](https://patchblox.com/security/data/cve/CVE-2025-49730.md) | High | Microsoft Windows QoS scheduler | 7.8 | 0.0068 | | | [CVE-2025-49667](https://patchblox.com/security/data/cve/CVE-2025-49667.md) | High | Windows Win32K - ICOMP | 7.8 | 0.0057 | | | [CVE-2025-49721](https://patchblox.com/security/data/cve/CVE-2025-49721.md) | High | Windows Fast FAT Driver | 7.8 | 0.0056 | | | [CVE-2025-47971](https://patchblox.com/security/data/cve/CVE-2025-47971.md) | High | Virtual Hard Disk (VHDX) | 7.8 | 0.0054 | | | [CVE-2025-47973](https://patchblox.com/security/data/cve/CVE-2025-47973.md) | High | Virtual Hard Disk (VHDX) | 7.8 | 0.0054 | | | [CVE-2025-48821](https://patchblox.com/security/data/cve/CVE-2025-48821.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.1 | 0.0052 | | | [CVE-2025-55231](https://patchblox.com/security/data/cve/CVE-2025-55231.md) | High | Windows Storage | 7.5 | 0.0050 | | | [CVE-2025-48815](https://patchblox.com/security/data/cve/CVE-2025-48815.md) | High | Windows SSDP Service | 7.8 | 0.0046 | | | [CVE-2025-47976](https://patchblox.com/security/data/cve/CVE-2025-47976.md) | High | Windows SSDP Service | 7.8 | 0.0045 | | | [CVE-2025-49659](https://patchblox.com/security/data/cve/CVE-2025-49659.md) | High | Windows TDX.sys | 7.8 | 0.0043 | | | [CVE-2025-49679](https://patchblox.com/security/data/cve/CVE-2025-49679.md) | High | Windows Shell | 7.8 | 0.0043 | | | [CVE-2025-49686](https://patchblox.com/security/data/cve/CVE-2025-49686.md) | High | Windows TCP/IP | 7.8 | 0.0043 | | | [CVE-2025-47986](https://patchblox.com/security/data/cve/CVE-2025-47986.md) | High | Universal Print Management Service | 8.8 | 0.0043 | | | [CVE-2025-47996](https://patchblox.com/security/data/cve/CVE-2025-47996.md) | High | Windows MBT Transport driver | 7.8 | 0.0041 | | | [CVE-2025-47985](https://patchblox.com/security/data/cve/CVE-2025-47985.md) | High | Windows Event Tracing | 7.8 | 0.0041 | | | [CVE-2025-48805](https://patchblox.com/security/data/cve/CVE-2025-48805.md) | High | Microsoft MPEG-2 Video Extension | 7.8 | 0.0041 | | | [CVE-2025-48806](https://patchblox.com/security/data/cve/CVE-2025-48806.md) | High | Microsoft MPEG-2 Video Extension | 7.8 | 0.0041 | | | [CVE-2025-48816](https://patchblox.com/security/data/cve/CVE-2025-48816.md) | High | HID class driver | 7.8 | 0.0041 | | | [CVE-2025-49660](https://patchblox.com/security/data/cve/CVE-2025-49660.md) | High | Windows Event Tracing | 7.8 | 0.0041 | | | [CVE-2025-49661](https://patchblox.com/security/data/cve/CVE-2025-49661.md) | High | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0041 | | | [CVE-2025-49675](https://patchblox.com/security/data/cve/CVE-2025-49675.md) | High | Kernel Streaming WOW Thunk Service Driver | 7.8 | 0.0041 | | | [CVE-2025-48819](https://patchblox.com/security/data/cve/CVE-2025-48819.md) | High | Windows Universal Plug and Play (UPnP) Device Host | 7.1 | 0.0039 | | | [CVE-2025-49687](https://patchblox.com/security/data/cve/CVE-2025-49687.md) | High | Microsoft Input Method Editor (IME) | 8.8 | 0.0038 | | | [CVE-2025-47975](https://patchblox.com/security/data/cve/CVE-2025-47975.md) | High | Windows SSDP Service | 7.0 | 0.0037 | | | [CVE-2025-55230](https://patchblox.com/security/data/cve/CVE-2025-55230.md) | High | Windows MBT Transport driver | 7.8 | 0.0036 | | | [CVE-2025-49665](https://patchblox.com/security/data/cve/CVE-2025-49665.md) | High | Workspace Broker | 7.8 | 0.0032 | | | [CVE-2025-49732](https://patchblox.com/security/data/cve/CVE-2025-49732.md) | High | Microsoft Graphics Component | 7.8 | 0.0032 | | | [CVE-2025-49742](https://patchblox.com/security/data/cve/CVE-2025-49742.md) | High | Microsoft Graphics Component | 7.8 | 0.0032 | | | [CVE-2025-49678](https://patchblox.com/security/data/cve/CVE-2025-49678.md) | High | Windows NTFS | 7.0 | 0.0026 | | | [CVE-2025-49671](https://patchblox.com/security/data/cve/CVE-2025-49671.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0120 | | | [CVE-2025-49681](https://patchblox.com/security/data/cve/CVE-2025-49681.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0120 | | | [CVE-2025-49670](https://patchblox.com/security/data/cve/CVE-2025-49670.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0104 | | | [CVE-2025-49722](https://patchblox.com/security/data/cve/CVE-2025-49722.md) | Routine | Windows Print Spooler Components | 5.7 | 0.0065 | | | [CVE-2025-49664](https://patchblox.com/security/data/cve/CVE-2025-49664.md) | Routine | Windows User-Mode Driver Framework Host | 5.5 | 0.0064 | | | [CVE-2025-48808](https://patchblox.com/security/data/cve/CVE-2025-48808.md) | Routine | Windows Kernel | 5.5 | 0.0058 | | | [CVE-2025-49658](https://patchblox.com/security/data/cve/CVE-2025-49658.md) | Routine | Windows TDX.sys | 5.5 | 0.0054 | | | [CVE-2025-49684](https://patchblox.com/security/data/cve/CVE-2025-49684.md) | Routine | Storage Port Driver | 5.5 | 0.0051 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo