Microsoft · ServicingStack update · July 8, 2025

KB5062572: July 2025 cumulative update for Windows Server 23H2

KB5062572, released July 8, 2025, fixes 96 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
96
5 rated Critical
Exploited
0
None reported
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.4112
98th percentile

Priority of the 96 CVEs

Patch now 0 Urgent 14 High 67 Routine 15

Applies to

ProductBuild after install
Windows Server 202220348.3932
Windows Server 2022 (Server Core installation)20348.3932

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-47981 Windows SPNEGO Extended Negotiation Remote Code Execution 9.8 0.4112 More likely
Urgent CVE-2025-49724 Windows Connected Devices Platform Service Remote Code Execution 8.8 0.0981 More likely
Urgent CVE-2025-47978 Windows Kerberos Denial of Service 6.5 0.0215 More likely
Urgent CVE-2025-47987 Windows Cred SSProvider Protocol Elevation of Privilege 7.8 0.0179 More likely
Urgent CVE-2025-49744 Microsoft Graphics Component Elevation of Privilege 7.0 0.0081 More likely
Urgent CVE-2025-48822 Role: Windows Hyper-V Remote Code Execution 8.6 0.0075 Exploitation Less Likely
Urgent CVE-2025-48800 Windows BitLocker Security Feature Bypass 6.8 0.0068 More likely
Urgent CVE-2025-47980 Windows Imaging Component Information Disclosure 6.2 0.0067 Exploitation Less Likely
Urgent CVE-2025-48804 Windows BitLocker Security Feature Bypass 6.8 0.0065 More likely
Urgent CVE-2025-48818 Windows BitLocker Security Feature Bypass 6.8 0.0052 More likely
Urgent CVE-2024-36350 AMD Store Queue Information Disclosure 7.8 0.0049 Exploitation Less Likely
Urgent CVE-2025-48001 Windows BitLocker Security Feature Bypass 6.8 0.0044 More likely
Urgent CVE-2025-49727 Windows Win32K - GRFX Elevation of Privilege 7.0 0.0041 More likely
Urgent CVE-2024-36357 AMD L1 Data Queue Information Disclosure 7.8 0.0036 Exploitation Less Likely
High CVE-2025-47984 Windows GDI Information Disclosure 7.5 0.2327 Exploitation Less Likely
High CVE-2025-49683 Virtual Hard Disk (VHDX) Denial of Service 7.8 0.0206 Exploitation Unlikely
High CVE-2025-49716 Windows Netlogon Denial of Service 7.5 0.0163 Exploitation Unlikely
High CVE-2025-49666 Windows Kernel Remote Code Execution 7.2 0.0142 Exploitation Unlikely
High CVE-2025-48814 Windows Remote Desktop Licensing Service Security Feature Bypass 7.5 0.0127 Exploitation Less Likely
High CVE-2025-48817 Remote Desktop Client Remote Code Execution 8.8 0.0114 Exploitation Less Likely
High CVE-2025-49657 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0113 Exploitation Unlikely
High CVE-2025-48824 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0107 Exploitation Unlikely
High CVE-2025-47998 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0107 Exploitation Unlikely
High CVE-2025-49757 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0102 Exploitation Unlikely
High CVE-2025-49672 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0099 Exploitation Unlikely
Showing 1 to 25 of 96 1Next