# Security updates released in May 2025 - Web page: https://patchblox.com/security/patch-radar/2025/05 | Platform | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Microsoft | 33 | 62 | 20 | 20 | | macOS | 3 | 58 | 0 | 0 | | Linux | 2,707 | 2,042 | 31 | 31 | ## Patch Tuesday, May 13, 2025 68 CVEs, 4 Critical, 5 exploited, 2 publicly disclosed, in 33 security updates. ## Microsoft products with the most CVEs fixed | Product | CVEs | Exploited | Patch now | |---|---:|---:|---:| | Windows Server | 46 | 5 | 5 | | Windows 11 | 41 | 5 | 5 | | Windows 10 | 37 | 5 | 5 | | Microsoft Office | 10 | 0 | 0 | | SharePoint Server | 4 | 0 | 0 | | .NET and Visual Studio | 1 | 0 | 0 | ## Microsoft updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [KB5058411](https://patchblox.com/security/data/fix/microsoft/kb5058411.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more | May 13, 2025 | Patch now | 43 | 5 | CVE-2025-30397 | | [KB5058405](https://patchblox.com/security/data/fix/microsoft/kb5058405.md) | Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems and 1 more | May 13, 2025 | Patch now | 38 | 5 | CVE-2025-30397 | | [KB5058384](https://patchblox.com/security/data/fix/microsoft/kb5058384.md) | Windows Server 2022, 23H2 Edition (Server Core installation) | May 13, 2025 | Patch now | 43 | 5 | CVE-2025-30397 | | [KB5058385](https://patchblox.com/security/data/fix/microsoft/kb5058385.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | May 13, 2025 | Patch now | 41 | 5 | CVE-2025-30397 | | [KB5058392](https://patchblox.com/security/data/fix/microsoft/kb5058392.md) | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more | May 13, 2025 | Patch now | 41 | 5 | CVE-2025-30397 | | [KB5058497](https://patchblox.com/security/data/fix/microsoft/kb5058497.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more | May 13, 2025 | Patch now | 41 | 5 | CVE-2025-30397 | | [KB5058500](https://patchblox.com/security/data/fix/microsoft/kb5058500.md) | Windows Server 2022, Windows Server 2022 (Server Core installation) | May 13, 2025 | Patch now | 41 | 5 | CVE-2025-30397 | | [KB5058379](https://patchblox.com/security/data/fix/microsoft/kb5058379.md) | Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more | May 13, 2025 | Patch now | 36 | 5 | CVE-2025-30397 | | [KB5058383](https://patchblox.com/security/data/fix/microsoft/kb5058383.md) | Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more | May 13, 2025 | Patch now | 38 | 4 | CVE-2025-30397 | | [KB5058403](https://patchblox.com/security/data/fix/microsoft/kb5058403.md) | Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) | May 13, 2025 | Patch now | 33 | 4 | CVE-2025-30397 | | [KB5058451](https://patchblox.com/security/data/fix/microsoft/kb5058451.md) | Windows Server 2012, Windows Server 2012 (Server Core installation) | May 13, 2025 | Patch now | 33 | 4 | CVE-2025-30397 | | [KB5058387](https://patchblox.com/security/data/fix/microsoft/kb5058387.md) | Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems | May 13, 2025 | Patch now | 33 | 4 | CVE-2025-30397 | | [KB5058430](https://patchblox.com/security/data/fix/microsoft/kb5058430.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | May 13, 2025 | Patch now | 29 | 3 | CVE-2025-30397 | | [KB5058454](https://patchblox.com/security/data/fix/microsoft/kb5058454.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | May 13, 2025 | Patch now | 29 | 3 | CVE-2025-30397 | | [KB5058429](https://patchblox.com/security/data/fix/microsoft/kb5058429.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | May 13, 2025 | Patch now | 25 | 3 | CVE-2025-30397 | | [KB5058449](https://patchblox.com/security/data/fix/microsoft/kb5058449.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | May 13, 2025 | Patch now | 23 | 3 | CVE-2025-30397 | | [KB5058380](https://patchblox.com/security/data/fix/microsoft/kb5058380.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Windows Server 2008 for 32-bit Systems Service Pack 2 and 7 more | May 13, 2025 | Patch now | 1 | 1 | CVE-2025-30397 | | [KB5061195](https://patchblox.com/security/data/fix/microsoft/kb5061195.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | May 13, 2025 | Patch now | 1 | 1 | CVE-2025-32709 | | [KB5061196](https://patchblox.com/security/data/fix/microsoft/kb5061196.md) | Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | May 13, 2025 | Patch now | 1 | 1 | CVE-2025-32709 | | [KB5061197](https://patchblox.com/security/data/fix/microsoft/kb5061197.md) | Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more | May 13, 2025 | Patch now | 1 | 1 | CVE-2025-32709 | | [KB5061258](https://patchblox.com/security/data/fix/microsoft/kb5061258.md) | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems | May 13, 2025 | Urgent | 1 | 0 | CVE-2025-29971 | | [KB5002708](https://patchblox.com/security/data/fix/microsoft/kb5002708.md) | Microsoft SharePoint Server 2019 | May 13, 2025 | Urgent | 4 | 0 | CVE-2025-30382 | | [KB5002709](https://patchblox.com/security/data/fix/microsoft/kb5002709.md) | Microsoft SharePoint Server Subscription Edition | May 13, 2025 | Urgent | 4 | 0 | CVE-2025-30382 | | [KB5002722](https://patchblox.com/security/data/fix/microsoft/kb5002722.md) | Microsoft SharePoint Enterprise Server 2016 | May 13, 2025 | Urgent | 4 | 0 | CVE-2025-30382 | | [KB5002711](https://patchblox.com/security/data/fix/microsoft/kb5002711.md) | Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) | May 13, 2025 | Urgent | 2 | 0 | CVE-2025-30377 | | [KB5002706](https://patchblox.com/security/data/fix/microsoft/kb5002706.md) | Microsoft SharePoint Server 2019 | May 13, 2025 | Urgent | 1 | 0 | CVE-2025-29976 | | [KB5002712](https://patchblox.com/security/data/fix/microsoft/kb5002712.md) | Microsoft SharePoint Enterprise Server 2016 | May 13, 2025 | Urgent | 1 | 0 | CVE-2025-29976 | | [KB5059200](https://patchblox.com/security/data/fix/microsoft/kb5059200.md) | .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows | May 13, 2025 | High | 1 | 0 | CVE-2025-26646 | | [KB5059201](https://patchblox.com/security/data/fix/microsoft/kb5059201.md) | .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows | May 13, 2025 | High | 1 | 0 | CVE-2025-26646 | | [KB5002707](https://patchblox.com/security/data/fix/microsoft/kb5002707.md) | Office Online Server | May 13, 2025 | High | 7 | 0 | CVE-2025-29979 | | [KB5002717](https://patchblox.com/security/data/fix/microsoft/kb5002717.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition) and 1 more | May 13, 2025 | High | 7 | 0 | CVE-2025-29979 | | [KB5002716](https://patchblox.com/security/data/fix/microsoft/kb5002716.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | May 13, 2025 | High | 1 | 0 | CVE-2025-30379 | | [KB5002695](https://patchblox.com/security/data/fix/microsoft/kb5002695.md) | Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition) | May 13, 2025 | High | 1 | 0 | CVE-2025-32704 | ## macOS updates | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [Sonoma 14.7.6](https://patchblox.com/security/data/fix/macos/sonoma-14.7.6.md) | Sonoma | May 12, 2025 | Urgent | 32 | 0 | CVE-2025-30448 | | [Ventura 13.7.6](https://patchblox.com/security/data/fix/macos/ventura-13.7.6.md) | Ventura | May 12, 2025 | Urgent | 29 | 0 | CVE-2025-30448 | | [Sequoia 15.5](https://patchblox.com/security/data/fix/macos/sequoia-15.5.md) | Sequoia | May 12, 2025 | High | 51 | 0 | CVE-2024-8176 | ## Linux, by distribution | Distribution | Fixes | CVEs | Fixes with exploited CVEs | Patch now | |---|---:|---:|---:|---:| | Ubuntu | 1,262 | 98 | 25 | 25 | | Debian | 782 | 747 | 0 | 0 | | Red Hat | 149 | 654 | 1 | 1 | | almalinux | 138 | 209 | 3 | 3 | | rocky | 132 | 442 | 2 | 2 | | ol | 108 | 531 | 0 | 0 | | sles | 90 | 286 | 0 | 0 | | amzn | 31 | 59 | 0 | 0 | | opensuse-leap | 15 | 16 | 0 | 0 | ## Most urgent Linux advisories | Fix | Products | Released | Priority | CVEs | Exploited | Top CVE | |---|---|---|---|---:|---:|---| | [RLSA-2024:4720](https://patchblox.com/security/data/fix/linux/rlsa-2024-4720.md) | httpd, mod_http2, mod_md on rocky 8 | May 7, 2025 | Patch now | 5 | 1 | CVE-2024-38475 | | [ALSA-2025:7497](https://patchblox.com/security/data/fix/linux/alsa-2025-7497.md) | tomcat, tomcat-admin-webapps, tomcat-docs-webapp and 5 more on almalinux 10 | May 13, 2025 | Patch now | 3 | 1 | CVE-2025-24813 | | [ALSA-2025:7494](https://patchblox.com/security/data/fix/linux/alsa-2025-7494.md) | tomcat9, tomcat9-admin-webapps, tomcat9-docs-webapp and 5 more on almalinux 10 | May 13, 2025 | Patch now | 1 | 1 | CVE-2025-24813 | | [ALSA-2025:8292](https://patchblox.com/security/data/fix/linux/alsa-2025-8292.md) | mingw32-freetype, mingw32-freetype-static, mingw64-freetype and 1 more on almalinux 8 | May 29, 2025 | Patch now | 10 | 1 | CVE-2025-27363 | | [RHSA-2025:8292](https://patchblox.com/security/data/fix/linux/rhsa-2025-8292.md) | mingw32-freetype, mingw32-freetype-static, mingw64-freetype and 3 more on RHEL 8 | May 29, 2025 | Patch now | 10 | 1 | CVE-2025-27363 | | [gir1.2-javascriptcoregtk-4.0 2.48.0-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-4.0-2.48.0-0ubuntu0.22.04.1.md) | gir1.2-javascriptcoregtk-4.0 on Ubuntu 22.04.1 LTS (jammy) | May 19, 2025 | Patch now | 4 | 1 | CVE-2025-24201 | | [gir1.2-javascriptcoregtk-4.1 2.48.0-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-4.1-2.48.0-0ubuntu0.22.04.1.md) | gir1.2-javascriptcoregtk-4.1 on Ubuntu 22.04.1 LTS (jammy) | May 19, 2025 | Patch now | 4 | 1 | CVE-2025-24201 | | [gir1.2-javascriptcoregtk-4.1 2.48.0-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gir1.2-javascriptcoregtk-4.1-2.48.0-0ubuntu0.24.04.1.md) | gir1.2-javascriptcoregtk-4.1 on Ubuntu 24.04.5 LTS (noble) | May 19, 2025 | Patch now | 4 | 1 | CVE-2025-24201 | | [gir1.2-javascriptcoregtk-6.0 2.48.0-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-javascriptcoregtk-6.0-2.48.0-0ubuntu0.22.04.1.md) | gir1.2-javascriptcoregtk-6.0 on Ubuntu 22.04.1 LTS (jammy) | May 19, 2025 | Patch now | 4 | 1 | CVE-2025-24201 | | [gir1.2-javascriptcoregtk-6.0 2.48.0-0ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gir1.2-javascriptcoregtk-6.0-2.48.0-0ubuntu0.24.04.1.md) | gir1.2-javascriptcoregtk-6.0 on Ubuntu 24.04.5 LTS (noble) | May 19, 2025 | Patch now | 4 | 1 | CVE-2025-24201 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo