Microsoft · Security update · June 10, 2025

KB5061072: June 2025 security update

KB5061072, released June 10, 2025, fixes 11 CVEs across 4 products. One of them is being exploited (CVE-2025-33073); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
11
None rated Critical
Exploited
1
CVE-2025-33073
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8283
99th percentile

Priority of the 11 CVEs

Patch now 1 Urgent 2 High 7 Routine 1

Applies to

Product
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2025-33073 Windows SMB Elevation of Privilege 8.8 0.8283 KEVDisclosedExploited
Urgent CVE-2025-32714 Windows Installer Elevation of Privilege 7.8 0.0141 More likely
Urgent CVE-2025-32713 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0080 More likely
High CVE-2025-32724 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service 7.5 0.0190 Exploitation Unlikely
High CVE-2025-33056 Microsoft Local Security Authority Server (lsasrv) Denial of Service 7.5 0.0180 Exploitation Less Likely
High CVE-2025-33064 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0139 Exploitation Unlikely
High CVE-2025-33066 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0113 Exploitation Unlikely
High CVE-2025-33075 Windows Installer Elevation of Privilege 7.8 0.0064 Exploitation Less Likely
High CVE-2025-32712 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0051 Exploitation Less Likely
High CVE-2025-32716 Windows Media Elevation of Privilege 7.8 0.0051 Exploitation Unlikely
Routine CVE-2025-33057 Windows Local Security Authority (LSA) Denial of Service 6.5 0.0193 Exploitation Less Likely
Showing 1 to 11 of 11 1