Microsoft · Security update · July 8, 2025
KB5062619: July 2025 security update
KB5062619, released July 8, 2025, fixes 55 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
55
2 rated Critical
Exploited
0
None reported
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.4112
98th percentile
Priority of the 55 CVEs
Patch now 0
Urgent 4
High 44
Routine 7
Applies to
| Product |
|---|
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-47981 | Windows SPNEGO Extended Negotiation | Remote Code Execution | 9.8 | 0.4112 | More likely |
| Urgent | CVE-2025-47987 | Windows Cred SSProvider Protocol | Elevation of Privilege | 7.8 | 0.0179 | More likely |
| Urgent | CVE-2025-47980 | Windows Imaging Component | Information Disclosure | 6.2 | 0.0067 | Exploitation Less Likely |
| Urgent | CVE-2025-49727 | Windows Win32K - GRFX | Elevation of Privilege | 7.0 | 0.0041 | More likely |
| High | CVE-2025-47984 | Windows GDI | Information Disclosure | 7.5 | 0.2327 | Exploitation Less Likely |
| High | CVE-2025-49683 | Virtual Hard Disk (VHDX) | Denial of Service | 7.8 | 0.0206 | Exploitation Unlikely |
| High | CVE-2025-49716 | Windows Netlogon | Denial of Service | 7.5 | 0.0163 | Exploitation Unlikely |
| High | CVE-2025-48814 | Windows Remote Desktop Licensing Service | Security Feature Bypass | 7.5 | 0.0127 | Exploitation Less Likely |
| High | CVE-2025-48817 | Remote Desktop Client | Remote Code Execution | 8.8 | 0.0114 | Exploitation Less Likely |
| High | CVE-2025-49657 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0113 | Exploitation Unlikely |
| High | CVE-2025-48824 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0107 | Exploitation Unlikely |
| High | CVE-2025-47998 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0107 | Exploitation Unlikely |
| High | CVE-2025-49757 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0102 | Exploitation Unlikely |
| High | CVE-2025-49672 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0099 | Exploitation Unlikely |
| High | CVE-2025-49676 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0099 | Exploitation Unlikely |
| High | CVE-2025-49663 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49668 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49669 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49673 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49753 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0092 | Exploitation Unlikely |
| High | CVE-2025-49674 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0089 | Exploitation Unlikely |
| High | CVE-2025-49689 | Virtual Hard Disk (VHDX) | Elevation of Privilege | 7.8 | 0.0071 | Exploitation Less Likely |
| High | CVE-2025-49729 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0071 | Exploitation Unlikely |
| High | CVE-2025-49730 | Microsoft Windows QoS scheduler | Elevation of Privilege | 7.8 | 0.0068 | Exploitation Less Likely |
| High | CVE-2025-49667 | Windows Win32K - ICOMP | Elevation of Privilege | 7.8 | 0.0057 | Exploitation Less Likely |
Showing 1 to 25 of 55
1Next