Microsoft · Security update · August 12, 2025

KB5063878: August 2025 cumulative update for Windows Server 2025

KB5063878, released August 12, 2025, fixes 61 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
61
5 rated Critical
Exploited
0
None reported
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.5162
98th percentile

Priority of the 61 CVEs

Patch now 0 Urgent 11 High 38 Routine 12

Applies to

ProductBuild after install
Windows 11 Version 24H2 for ARM64-based Systems26100.4946
Windows 11 Version 24H2 for x64-based Systems26100.4946
Windows Server 202526100.4946
Windows Server 2025 (Server Core installation)26100.4946

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-53778 Windows NTLM Elevation of Privilege 8.8 0.5162 More likely
Urgent CVE-2025-50165 Microsoft Graphics Component Remote Code Execution 9.8 0.1080 Exploitation Less Likely
Urgent CVE-2025-53766 Windows GDI+ Remote Code Execution 9.8 0.0846 Exploitation Less Likely
Urgent CVE-2025-50177 Windows Message Queuing Remote Code Execution 8.1 0.0461 More likely
Urgent CVE-2025-50168 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0077 More likely
Urgent CVE-2025-53156 Storage Port Driver Information Disclosure 5.5 0.0071 More likely
Urgent CVE-2025-50176 Graphics Kernel Remote Code Execution 7.8 0.0054 Exploitation Less Likely
Urgent CVE-2025-49743 Microsoft Graphics Component Elevation of Privilege 6.7 0.0053 More likely
Urgent CVE-2025-53132 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0046 More likely
Urgent CVE-2025-53147 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0045 More likely
Urgent CVE-2025-50167 Role: Windows Hyper-V Elevation of Privilege 7.0 0.0038 More likely
High CVE-2025-53722 Windows Remote Desktop Services Denial of Service 7.5 0.2342 Exploitation Less Likely
High CVE-2025-53143 Windows Message Queuing Remote Code Execution 8.8 0.0903 Exploitation Less Likely
High CVE-2025-53144 Windows Message Queuing Remote Code Execution 8.8 0.0849 Exploitation Less Likely
High CVE-2025-53145 Windows Message Queuing Remote Code Execution 8.8 0.0849 Exploitation Less Likely
High CVE-2025-53779 Windows Kerberos Elevation of Privilege 7.2 0.0271 DisclosedExploitation Less Likely
High CVE-2025-50171 Remote Desktop Server Spoofing 9.1 0.0104 Exploitation Less Likely
High CVE-2025-53720 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0098 Exploitation Unlikely
High CVE-2025-50163 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0097 Exploitation Unlikely
High CVE-2025-53131 Windows Media Remote Code Execution 8.8 0.0097 Exploitation Less Likely
High CVE-2025-50160 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Less Likely
High CVE-2025-50162 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Unlikely
High CVE-2025-50164 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Unlikely
High CVE-2025-53149 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege 7.8 0.0077 Exploitation Less Likely
High CVE-2025-50169 Windows SMB Remote Code Execution 7.5 0.0069 Exploitation Unlikely
Showing 1 to 25 of 61 1Next