Microsoft · Security update · August 12, 2025
KB5063927: August 2025 security update
KB5063927, released August 12, 2025, fixes 38 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
38
3 rated Critical
Exploited
0
None reported
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.5162
98th percentile
Priority of the 38 CVEs
Patch now 0
Urgent 6
High 23
Routine 9
Applies to
| Product |
|---|
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2025-53778 | Windows NTLM | Elevation of Privilege | 8.8 | 0.5162 | More likely |
| Urgent | CVE-2025-53766 | Windows GDI+ | Remote Code Execution | 9.8 | 0.0846 | Exploitation Less Likely |
| Urgent | CVE-2025-50177 | Windows Message Queuing | Remote Code Execution | 8.1 | 0.0461 | More likely |
| Urgent | CVE-2025-49743 | Microsoft Graphics Component | Elevation of Privilege | 6.7 | 0.0053 | More likely |
| Urgent | CVE-2025-53132 | Windows Win32K - GRFX | Elevation of Privilege | 7.8 | 0.0046 | More likely |
| Urgent | CVE-2025-53147 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0045 | More likely |
| High | CVE-2025-53722 | Windows Remote Desktop Services | Denial of Service | 7.5 | 0.2342 | Exploitation Less Likely |
| High | CVE-2025-53143 | Windows Message Queuing | Remote Code Execution | 8.8 | 0.0903 | Exploitation Less Likely |
| High | CVE-2025-53144 | Windows Message Queuing | Remote Code Execution | 8.8 | 0.0849 | Exploitation Less Likely |
| High | CVE-2025-53145 | Windows Message Queuing | Remote Code Execution | 8.8 | 0.0849 | Exploitation Less Likely |
| High | CVE-2025-53720 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.0 | 0.0098 | Exploitation Unlikely |
| High | CVE-2025-50163 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0097 | Exploitation Unlikely |
| High | CVE-2025-50160 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.0 | 0.0093 | Exploitation Less Likely |
| High | CVE-2025-50162 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.0 | 0.0093 | Exploitation Unlikely |
| High | CVE-2025-50164 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.0 | 0.0093 | Exploitation Unlikely |
| High | CVE-2025-53149 | Kernel Streaming WOW Thunk Service Driver | Elevation of Privilege | 7.8 | 0.0077 | Exploitation Less Likely |
| High | CVE-2025-50161 | Windows Win32K - GRFX | Elevation of Privilege | 7.3 | 0.0060 | Exploitation Less Likely |
| High | CVE-2025-50173 | Windows Installer | Elevation of Privilege | 7.8 | 0.0055 | Exploitation Less Likely |
| High | CVE-2025-53152 | Desktop Windows Manager | Remote Code Execution | 7.8 | 0.0045 | Exploitation Less Likely |
| High | CVE-2025-49761 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0044 | Exploitation Unlikely |
| High | CVE-2025-50153 | Desktop Windows Manager | Elevation of Privilege | 7.8 | 0.0044 | Exploitation Less Likely |
| High | CVE-2025-53141 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0044 | Exploitation Less Likely |
| High | CVE-2025-53154 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0044 | Exploitation Less Likely |
| High | CVE-2025-53137 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0039 | Exploitation Less Likely |
| High | CVE-2025-50158 | Windows NTFS | Information Disclosure | 7.0 | 0.0039 | Exploitation Less Likely |
Showing 1 to 25 of 38
1Next