Microsoft · Security update · June 10, 2025
KB5060842: June 2025 cumulative update for Windows Server 2025
KB5060842, released June 10, 2025, fixes 40 CVEs across 4 products. 2 of them are being exploited (CVE-2025-33053); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
40
4 rated Critical
Exploited
2
CVE-2025-33053
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.8714
99th percentile
Priority of the 40 CVEs
Patch now 2
Urgent 6
High 12
Routine 20
Applies to
| Product | Build after install |
|---|---|
| Windows 11 Version 24H2 for ARM64-based Systems | 26100.4349 |
| Windows 11 Version 24H2 for x64-based Systems | 26100.4349 |
| Windows Server 2025 | 26100.4349 |
| Windows Server 2025 (Server Core installation) | 26100.4349 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2025-33053 | Internet Shortcut Files | Remote Code Execution | 8.8 | 0.8714 | KEVExploited |
| Patch now | CVE-2025-33073 | Windows SMB | Elevation of Privilege | 8.8 | 0.8283 | KEVDisclosedExploited |
| Urgent | CVE-2025-33071 | Windows KDC Proxy Service (KPSSVC) | Remote Code Execution | 8.1 | 0.2337 | More likely |
| Urgent | CVE-2025-33070 | Windows Netlogon | Elevation of Privilege | 8.1 | 0.1031 | More likely |
| Urgent | CVE-2025-32714 | Windows Installer | Elevation of Privilege | 7.8 | 0.0141 | More likely |
| Urgent | CVE-2025-29828 | Windows Cryptographic Services | Remote Code Execution | 8.1 | 0.0127 | Exploitation Less Likely |
| Urgent | CVE-2025-49735 | Windows KDC Proxy Service (KPSSVC) | Remote Code Execution | 8.1 | 0.0120 | More likely |
| Urgent | CVE-2025-32713 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0080 | More likely |
| High | CVE-2025-33050 | Windows DHCP Server | Denial of Service | 7.5 | 0.0194 | Exploitation Less Likely |
| High | CVE-2025-32724 | Windows Local Security Authority Subsystem Service (LSASS) | Denial of Service | 7.5 | 0.0190 | Exploitation Unlikely |
| High | CVE-2025-32725 | Windows DHCP Server | Denial of Service | 7.5 | 0.0190 | Exploitation Less Likely |
| High | CVE-2025-33068 | Windows Standards-Based Storage Management Service | Denial of Service | 7.5 | 0.0190 | Exploitation Unlikely |
| High | CVE-2025-33056 | Microsoft Local Security Authority Server (lsasrv) | Denial of Service | 7.5 | 0.0180 | Exploitation Less Likely |
| High | CVE-2025-33064 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0139 | Exploitation Unlikely |
| High | CVE-2025-33066 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0113 | Exploitation Unlikely |
| High | CVE-2025-32721 | Windows Recovery Driver | Elevation of Privilege | 7.3 | 0.0069 | Exploitation Unlikely |
| High | CVE-2025-33075 | Windows Installer | Elevation of Privilege | 7.8 | 0.0064 | Exploitation Less Likely |
| High | CVE-2025-32712 | Windows Win32K - GRFX | Elevation of Privilege | 7.8 | 0.0051 | Exploitation Less Likely |
| High | CVE-2025-32718 | Windows SMB | Elevation of Privilege | 7.8 | 0.0051 | Exploitation Unlikely |
| High | CVE-2025-33067 | Windows Kernel | Elevation of Privilege | 8.4 | 0.0047 | Exploitation Less Likely |
| Routine | CVE-2025-33057 | Windows Local Security Authority (LSA) | Denial of Service | 6.5 | 0.0193 | Exploitation Less Likely |
| Routine | CVE-2025-32715 | Remote Desktop Client | Information Disclosure | 6.5 | 0.0156 | Exploitation Less Likely |
| Routine | CVE-2025-32722 | Windows Storage Port Driver | Information Disclosure | 5.5 | 0.0117 | Exploitation Less Likely |
| Routine | CVE-2025-47160 | Windows Shell | Security Feature Bypass | 5.4 | 0.0087 | Exploitation Less Likely |
| Routine | CVE-2025-32720 | Windows Storage Management Provider | Information Disclosure | 5.5 | 0.0072 | Exploitation Unlikely |
Showing 1 to 25 of 40
1Next