Microsoft · Security update · July 8, 2025
KB5062597: July 2025 security update
KB5062597, released July 8, 2025, fixes 63 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
63
2 rated Critical
Exploited
0
None reported
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.4112
98th percentile
Priority of the 63 CVEs
Patch now 0
Urgent 6
High 49
Routine 8
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-47981 | Windows SPNEGO Extended Negotiation | Remote Code Execution | 9.8 | 0.4112 | More likely |
| Urgent | CVE-2025-47987 | Windows Cred SSProvider Protocol | Elevation of Privilege | 7.8 | 0.0179 | More likely |
| Urgent | CVE-2025-47980 | Windows Imaging Component | Information Disclosure | 6.2 | 0.0067 | Exploitation Less Likely |
| Urgent | CVE-2025-48804 | Windows BitLocker | Security Feature Bypass | 6.8 | 0.0065 | More likely |
| Urgent | CVE-2025-48001 | Windows BitLocker | Security Feature Bypass | 6.8 | 0.0044 | More likely |
| Urgent | CVE-2025-49727 | Windows Win32K - GRFX | Elevation of Privilege | 7.0 | 0.0041 | More likely |
| High | CVE-2025-47984 | Windows GDI | Information Disclosure | 7.5 | 0.2327 | Exploitation Less Likely |
| High | CVE-2025-49683 | Virtual Hard Disk (VHDX) | Denial of Service | 7.8 | 0.0206 | Exploitation Unlikely |
| High | CVE-2025-49716 | Windows Netlogon | Denial of Service | 7.5 | 0.0163 | Exploitation Unlikely |
| High | CVE-2025-48814 | Windows Remote Desktop Licensing Service | Security Feature Bypass | 7.5 | 0.0127 | Exploitation Less Likely |
| High | CVE-2025-48817 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0114 | Exploitation Less Likely |
| High | CVE-2025-49657 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0113 | Exploitation Unlikely |
| High | CVE-2025-48824 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0107 | Exploitation Unlikely |
| High | CVE-2025-47998 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0107 | Exploitation Unlikely |
| High | CVE-2025-49757 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0102 | Exploitation Unlikely |
| High | CVE-2025-49672 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0099 | Exploitation Unlikely |
| High | CVE-2025-49676 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0099 | Exploitation Unlikely |
| High | CVE-2025-49688 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0099 | Exploitation Unlikely |
| High | CVE-2025-49663 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49668 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49669 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49673 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49753 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49674 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0089 | Exploitation Unlikely |
| High | CVE-2025-49689 | Virtual Hard Disk (VHDX) | Elevation of Privilege | 7.8 | 0.0071 | Exploitation Less Likely |
Showing 1 to 25 of 63
1Next