Microsoft · ServicingStack update · August 12, 2025

KB5063880: August 2025 cumulative update for Windows Server 23H2

KB5063880, released August 12, 2025, fixes 56 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
56
4 rated Critical
Exploited
0
None reported
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.5162
98th percentile

Priority of the 56 CVEs

Patch now 0 Urgent 8 High 36 Routine 12

Applies to

ProductBuild after install
Windows Server 202220348.4052
Windows Server 2022 (Server Core installation)20348.4052

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-53778 Windows NTLM Elevation of Privilege 8.8 0.5162 More likely
Urgent CVE-2025-53766 Windows GDI+ Remote Code Execution 9.8 0.0846 Exploitation Less Likely
Urgent CVE-2025-50177 Windows Message Queuing Remote Code Execution 8.1 0.0461 More likely
Urgent CVE-2025-50176 Graphics Kernel Remote Code Execution 7.8 0.0054 Exploitation Less Likely
Urgent CVE-2025-49743 Microsoft Graphics Component Elevation of Privilege 6.7 0.0053 More likely
Urgent CVE-2025-53132 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0046 More likely
Urgent CVE-2025-53147 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0045 More likely
Urgent CVE-2025-50167 Role: Windows Hyper-V Elevation of Privilege 7.0 0.0038 More likely
High CVE-2025-53722 Windows Remote Desktop Services Denial of Service 7.5 0.2342 Exploitation Less Likely
High CVE-2025-53143 Windows Message Queuing Remote Code Execution 8.8 0.0903 Exploitation Less Likely
High CVE-2025-53144 Windows Message Queuing Remote Code Execution 8.8 0.0849 Exploitation Less Likely
High CVE-2025-53145 Windows Message Queuing Remote Code Execution 8.8 0.0849 Exploitation Less Likely
High CVE-2025-50171 Remote Desktop Server Spoofing 9.1 0.0104 Exploitation Less Likely
High CVE-2025-53720 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0098 Exploitation Unlikely
High CVE-2025-50163 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0097 Exploitation Unlikely
High CVE-2025-53131 Windows Media Remote Code Execution 8.8 0.0097 Exploitation Less Likely
High CVE-2025-50160 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Less Likely
High CVE-2025-50162 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Unlikely
High CVE-2025-50164 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Unlikely
High CVE-2025-53149 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege 7.8 0.0077 Exploitation Less Likely
High CVE-2025-50161 Windows Win32K - GRFX Elevation of Privilege 7.3 0.0060 Exploitation Less Likely
High CVE-2025-50159 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege 7.3 0.0059 Exploitation Less Likely
High CVE-2025-50173 Windows Installer Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2025-53155 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
High CVE-2025-53723 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
Showing 1 to 25 of 56 1Next