Microsoft · ServicingStack update · July 8, 2025

KB5062570: July 2025 cumulative update for Windows Server 23H2

KB5062570, released July 8, 2025, fixes 98 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1732). None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
98
5 rated Critical
Exploited
0
None reported
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.4112
98th percentile

Priority of the 98 CVEs

Patch now 0 Urgent 14 High 69 Routine 15

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.1732

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-47981 Windows SPNEGO Extended Negotiation Remote Code Execution 9.8 0.4112 More likely
Urgent CVE-2025-49724 Windows Connected Devices Platform Service Remote Code Execution 8.8 0.0981 More likely
Urgent CVE-2025-47978 Windows Kerberos Denial of Service 6.5 0.0215 More likely
Urgent CVE-2025-47987 Windows Cred SSProvider Protocol Elevation of Privilege 7.8 0.0179 More likely
Urgent CVE-2025-49744 Microsoft Graphics Component Elevation of Privilege 7.0 0.0081 More likely
Urgent CVE-2025-48822 Role: Windows Hyper-V Remote Code Execution 8.6 0.0075 Exploitation Less Likely
Urgent CVE-2025-48800 Windows BitLocker Security Feature Bypass 6.8 0.0068 More likely
Urgent CVE-2025-47980 Windows Imaging Component Information Disclosure 6.2 0.0067 Exploitation Less Likely
Urgent CVE-2025-48804 Windows BitLocker Security Feature Bypass 6.8 0.0065 More likely
Urgent CVE-2025-48818 Windows BitLocker Security Feature Bypass 6.8 0.0052 More likely
Urgent CVE-2024-36350 AMD Store Queue Information Disclosure 7.8 0.0049 Exploitation Less Likely
Urgent CVE-2025-48001 Windows BitLocker Security Feature Bypass 6.8 0.0044 More likely
Urgent CVE-2025-49727 Windows Win32K - GRFX Elevation of Privilege 7.0 0.0041 More likely
Urgent CVE-2024-36357 AMD L1 Data Queue Information Disclosure 7.8 0.0036 Exploitation Less Likely
High CVE-2025-47984 Windows GDI Information Disclosure 7.5 0.2327 Exploitation Less Likely
High CVE-2025-49683 Virtual Hard Disk (VHDX) Denial of Service 7.8 0.0206 Exploitation Unlikely
High CVE-2025-49716 Windows Netlogon Denial of Service 7.5 0.0163 Exploitation Unlikely
High CVE-2025-49666 Windows Kernel Remote Code Execution 7.2 0.0142 Exploitation Unlikely
High CVE-2025-48814 Windows Remote Desktop Licensing Service Security Feature Bypass 7.5 0.0127 Exploitation Less Likely
High CVE-2025-48817 Remote Desktop Client Remote Code Execution 8.8 0.0114 Exploitation Less Likely
High CVE-2025-49657 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0113 Exploitation Unlikely
High CVE-2025-48824 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0107 Exploitation Unlikely
High CVE-2025-47998 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0107 Exploitation Unlikely
High CVE-2025-49757 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0102 Exploitation Unlikely
High CVE-2025-49672 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0099 Exploitation Unlikely
Showing 1 to 25 of 98 1Next