Microsoft · Security update · July 8, 2025

KB5062560: July 2025 cumulative update for Windows 10 1607

KB5062560, released July 8, 2025, fixes 88 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
88
5 rated Critical
Exploited
0
None reported
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.4112
98th percentile

Priority of the 88 CVEs

Patch now 0 Urgent 13 High 62 Routine 13

Applies to

ProductBuild after install
Windows 10 Version 1607 for 32-bit Systems14393.8246
Windows 10 Version 1607 for x64-based Systems14393.8246
Windows Server 201614393.8246
Windows Server 2016 (Server Core installation)14393.8246

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-47981 Windows SPNEGO Extended Negotiation Remote Code Execution 9.8 0.4112 More likely
Urgent CVE-2025-47987 Windows Cred SSProvider Protocol Elevation of Privilege 7.8 0.0179 More likely
Urgent CVE-2025-48799 Windows Update Service Elevation of Privilege 7.8 0.0133 More likely
Urgent CVE-2025-49744 Microsoft Graphics Component Elevation of Privilege 7.0 0.0081 More likely
Urgent CVE-2025-48822 Role: Windows Hyper-V Remote Code Execution 8.6 0.0075 Exploitation Less Likely
Urgent CVE-2025-48800 Windows BitLocker Security Feature Bypass 6.8 0.0068 More likely
Urgent CVE-2025-47980 Windows Imaging Component Information Disclosure 6.2 0.0067 Exploitation Less Likely
Urgent CVE-2025-48804 Windows BitLocker Security Feature Bypass 6.8 0.0065 More likely
Urgent CVE-2025-48818 Windows BitLocker Security Feature Bypass 6.8 0.0052 More likely
Urgent CVE-2024-36350 AMD Store Queue Information Disclosure 7.8 0.0049 Exploitation Less Likely
Urgent CVE-2025-48001 Windows BitLocker Security Feature Bypass 6.8 0.0044 More likely
Urgent CVE-2025-49727 Windows Win32K - GRFX Elevation of Privilege 7.0 0.0041 More likely
Urgent CVE-2024-36357 AMD L1 Data Queue Information Disclosure 7.8 0.0036 Exploitation Less Likely
High CVE-2025-47984 Windows GDI Information Disclosure 7.5 0.2327 Exploitation Less Likely
High CVE-2025-49683 Virtual Hard Disk (VHDX) Denial of Service 7.8 0.0206 Exploitation Unlikely
High CVE-2025-49716 Windows Netlogon Denial of Service 7.5 0.0163 Exploitation Unlikely
High CVE-2025-49666 Windows Kernel Remote Code Execution 7.2 0.0142 Exploitation Unlikely
High CVE-2025-48814 Windows Remote Desktop Licensing Service Security Feature Bypass 7.5 0.0127 Exploitation Less Likely
High CVE-2025-48817 Remote Desktop Client Remote Code Execution 8.8 0.0114 Exploitation Less Likely
High CVE-2025-49657 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0113 Exploitation Unlikely
High CVE-2025-48824 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0107 Exploitation Unlikely
High CVE-2025-47998 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0107 Exploitation Unlikely
High CVE-2025-49757 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0102 Exploitation Unlikely
High CVE-2025-49672 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0099 Exploitation Unlikely
High CVE-2025-49676 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0099 Exploitation Unlikely
Showing 1 to 25 of 88 1Next