Microsoft · Security update · July 8, 2025

KB5062553: July 2025 cumulative update for Windows Server 2025

KB5062553, released July 8, 2025, fixes 102 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
102
5 rated Critical
Exploited
0
None reported
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.4112
98th percentile

Priority of the 102 CVEs

Patch now 0 Urgent 15 High 69 Routine 18

Applies to

ProductBuild after install
Windows 11 Version 24H2 for ARM64-based Systems26100.4652
Windows 11 Version 24H2 for x64-based Systems26100.4652
Windows Server 202526100.4652
Windows Server 2025 (Server Core installation)26100.4652

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-47981 Windows SPNEGO Extended Negotiation Remote Code Execution 9.8 0.4112 More likely
Urgent CVE-2025-49724 Windows Connected Devices Platform Service Remote Code Execution 8.8 0.0981 More likely
Urgent CVE-2025-47978 Windows Kerberos Denial of Service 6.5 0.0215 More likely
Urgent CVE-2025-47987 Windows Cred SSProvider Protocol Elevation of Privilege 7.8 0.0179 More likely
Urgent CVE-2025-48799 Windows Update Service Elevation of Privilege 7.8 0.0133 More likely
Urgent CVE-2025-49744 Microsoft Graphics Component Elevation of Privilege 7.0 0.0081 More likely
Urgent CVE-2025-48822 Role: Windows Hyper-V Remote Code Execution 8.6 0.0075 Exploitation Less Likely
Urgent CVE-2025-48800 Windows BitLocker Security Feature Bypass 6.8 0.0068 More likely
Urgent CVE-2025-47980 Windows Imaging Component Information Disclosure 6.2 0.0067 Exploitation Less Likely
Urgent CVE-2025-48804 Windows BitLocker Security Feature Bypass 6.8 0.0065 More likely
Urgent CVE-2025-48818 Windows BitLocker Security Feature Bypass 6.8 0.0052 More likely
Urgent CVE-2024-36350 AMD Store Queue Information Disclosure 7.8 0.0049 Exploitation Less Likely
Urgent CVE-2025-48001 Windows BitLocker Security Feature Bypass 6.8 0.0044 More likely
Urgent CVE-2025-49727 Windows Win32K - GRFX Elevation of Privilege 7.0 0.0041 More likely
Urgent CVE-2024-36357 AMD L1 Data Queue Information Disclosure 7.8 0.0036 Exploitation Less Likely
High CVE-2025-47984 Windows GDI Information Disclosure 7.5 0.2327 Exploitation Less Likely
High CVE-2025-49683 Virtual Hard Disk (VHDX) Denial of Service 7.8 0.0206 Exploitation Unlikely
High CVE-2025-49666 Windows Kernel Remote Code Execution 7.2 0.0142 Exploitation Unlikely
High CVE-2025-48814 Windows Remote Desktop Licensing Service Security Feature Bypass 7.5 0.0127 Exploitation Less Likely
High CVE-2025-48817 Remote Desktop Client Remote Code Execution 8.8 0.0114 Exploitation Less Likely
High CVE-2025-49657 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0113 Exploitation Unlikely
High CVE-2025-48824 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0107 Exploitation Unlikely
High CVE-2025-47998 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0107 Exploitation Unlikely
High CVE-2025-49757 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0102 Exploitation Unlikely
High CVE-2025-33054 Remote Desktop Client Spoofing 8.1 0.0102 Exploitation Less Likely
Showing 1 to 25 of 102 1Next