Microsoft · Security update · May 13, 2025
KB5058383: May 2025 cumulative update for Windows 10 1607
KB5058383, released May 13, 2025, fixes 38 CVEs across 4 products. 4 of them are being exploited (CVE-2025-30397); 4 on CISA KEV. Patch Radar priority: Patch now.
Patch now4 on CISA KEV
CVEs closed
38
4 rated Critical
Exploited
4
CVE-2025-30397
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.3419
98th percentile
Priority of the 38 CVEs
Patch now 4
Urgent 7
High 9
Routine 18
Applies to
| Product | Build after install |
|---|---|
| Windows 10 Version 1607 for 32-bit Systems | 14393.8066 |
| Windows 10 Version 1607 for x64-based Systems | 14393.8066 |
| Windows Server 2016 | 14393.8066 |
| Windows Server 2016 (Server Core installation) | 14393.8066 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-30397 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.2726 | KEVExploited |
| Patch now | CVE-2025-32706 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0233 | KEVExploited |
| Patch now | CVE-2025-32709 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0182 | KEVExploited |
| Patch now | CVE-2025-32701 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0142 | KEVExploited |
| Urgent | CVE-2025-30388 | Windows Win32K - GRFX | Remote Code Execution | 7.8 | 0.0438 | More likely |
| Urgent | CVE-2025-29966 | Windows Remote Desktop | Remote Code Execution | 8.8 | 0.0143 | Exploitation Less Likely |
| Urgent | CVE-2025-29967 | Remote Desktop Gateway Service | Remote Code Execution | 8.8 | 0.0134 | Exploitation Less Likely |
| Urgent | CVE-2025-32710 | Windows Remote Desktop Services | Remote Code Execution | 8.1 | 0.0108 | Exploitation Less Likely |
| Urgent | CVE-2025-24063 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0072 | More likely |
| Urgent | CVE-2025-30385 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0053 | More likely |
| Urgent | CVE-2025-29833 | Windows Virtual Machine Bus | Remote Code Execution | 7.7 | 0.0046 | Exploitation Less Likely |
| High | CVE-2025-29962 | Windows Media | Remote Code Execution | 8.8 | 0.1559 | Exploitation Less Likely |
| High | CVE-2025-26677 | Remote Desktop Gateway Service | Denial of Service | 7.5 | 0.0180 | Exploitation Less Likely |
| High | CVE-2025-29969 | Windows Fundamentals | Remote Code Execution | 7.5 | 0.0116 | Exploitation Less Likely |
| High | CVE-2025-29840 | Windows Media | Remote Code Execution | 8.8 | 0.0104 | Exploitation Less Likely |
| High | CVE-2025-29831 | Remote Desktop Gateway Service | Remote Code Execution | 7.5 | 0.0101 | Exploitation Unlikely |
| High | CVE-2025-47955 | Windows Remote Access Connection Manager | Elevation of Privilege | 7.8 | 0.0091 | Exploitation Less Likely |
| High | CVE-2025-32707 | Windows NTFS | Elevation of Privilege | 7.8 | 0.0056 | Exploitation Less Likely |
| High | CVE-2025-29842 | UrlMon | Security Feature Bypass | 7.5 | 0.0044 | Exploitation Less Likely |
| High | CVE-2025-27468 | Windows Secure Kernel Mode | Elevation of Privilege | 7.0 | 0.0026 | Exploitation Less Likely |
| Routine | CVE-2025-30394 | Remote Desktop Gateway Service | Denial of Service | 5.9 | 0.3419 | Exploitation Unlikely |
| Routine | CVE-2025-29968 | Active Directory Certificate Services (AD CS) | Denial of Service | 6.5 | 0.0203 | Exploitation Unlikely |
| Routine | CVE-2025-29959 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0153 | Exploitation Unlikely |
| Routine | CVE-2025-29960 | Windows Routing and Remote Access Service (RRAS) | Information Disclosure | 6.5 | 0.0153 | Exploitation Unlikely |
| Routine | CVE-2025-29954 | Windows LDAP - Lightweight Directory Access Protocol | Denial of Service | 5.9 | 0.0148 | Exploitation Unlikely |
Showing 1 to 25 of 38
1Next