Microsoft · ServicingStack update · August 12, 2025

KB5063899: August 2025 cumulative update for Windows Server 23H2

KB5063899, released August 12, 2025, fixes 57 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1791). None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
57
4 rated Critical
Exploited
0
None reported
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.5162
98th percentile

Priority of the 57 CVEs

Patch now 0 Urgent 10 High 35 Routine 12

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.1791

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2025-53778 Windows NTLM Elevation of Privilege 8.8 0.5162 More likely
Urgent CVE-2025-53766 Windows GDI+ Remote Code Execution 9.8 0.0846 Exploitation Less Likely
Urgent CVE-2025-50177 Windows Message Queuing Remote Code Execution 8.1 0.0461 More likely
Urgent CVE-2025-50168 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0077 More likely
Urgent CVE-2025-53156 Storage Port Driver Information Disclosure 5.5 0.0071 More likely
Urgent CVE-2025-50176 Graphics Kernel Remote Code Execution 7.8 0.0054 Exploitation Less Likely
Urgent CVE-2025-49743 Microsoft Graphics Component Elevation of Privilege 6.7 0.0053 More likely
Urgent CVE-2025-53132 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0046 More likely
Urgent CVE-2025-53147 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.0 0.0045 More likely
Urgent CVE-2025-50167 Role: Windows Hyper-V Elevation of Privilege 7.0 0.0038 More likely
High CVE-2025-53722 Windows Remote Desktop Services Denial of Service 7.5 0.2342 Exploitation Less Likely
High CVE-2025-53143 Windows Message Queuing Remote Code Execution 8.8 0.0903 Exploitation Less Likely
High CVE-2025-53144 Windows Message Queuing Remote Code Execution 8.8 0.0849 Exploitation Less Likely
High CVE-2025-53145 Windows Message Queuing Remote Code Execution 8.8 0.0849 Exploitation Less Likely
High CVE-2025-50171 Remote Desktop Server Spoofing 9.1 0.0104 Exploitation Less Likely
High CVE-2025-53720 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0098 Exploitation Unlikely
High CVE-2025-50163 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0097 Exploitation Unlikely
High CVE-2025-53131 Windows Media Remote Code Execution 8.8 0.0097 Exploitation Less Likely
High CVE-2025-50160 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Less Likely
High CVE-2025-50162 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Unlikely
High CVE-2025-50164 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.0 0.0093 Exploitation Unlikely
High CVE-2025-53149 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege 7.8 0.0077 Exploitation Less Likely
High CVE-2025-50161 Windows Win32K - GRFX Elevation of Privilege 7.3 0.0060 Exploitation Less Likely
High CVE-2025-50159 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege 7.3 0.0059 Exploitation Less Likely
High CVE-2025-50173 Windows Installer Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
Showing 1 to 25 of 57 1Next