August 2025 security updates: Microsoft Patch Tuesday, macOS and Linux
Microsoft's Patch Tuesday on August 12, 2025 fixed 98 CVEs (11 critical, 0 exploited at release) in 38 security updates. Apple released 3 macOS updates fixing 1 CVEs. Debian, Ubuntu, Red Hat and Fedora released 867 Linux fixes for 464 CVEs. Every August 2025 security update, ranked by whether its vulnerabilities are being exploited.
Which of your machines are still exposed? Get a demo.
Updates by month
What Microsoft, Apple and the Linux distributions released in a calendar month. Each list is in priority order: exploited (KEV or vendor-confirmed) first, then by exploited CVEs closed, then by highest EPSS. Counts include every update released that month, supported products or not. Third-party apps follow below, by recent vulnerability.
Microsoft
All Microsoft fixes for August 2025Patch Tuesday was August 12, 2025: 98 CVEs (11 critical) in 38 security updates, 0 exploited at release.
Show as a table
| Product family | CVEs | Patch now | Urgent | High | Routine | Exploited | Most urgent fix |
|---|---|---|---|---|---|---|---|
| Windows Server | 63 | 0 | 11 | 40 | 12 | 0 | KB5063878 |
| Windows 11 | 51 | 0 | 11 | 34 | 6 | 0 | KB5063878 |
| Windows 10 | 44 | 0 | 7 | 31 | 6 | 0 | KB5063877 |
| Exchange Server | 5 | 0 | 1 | 1 | 3 | 0 | KB5047155 |
| SQL Server | 5 | 0 | 0 | 5 | 0 | 0 | KB5063756 |
| SharePoint Server | 4 | 0 | 1 | 2 | 1 | 0 | KB5002769 |
| Microsoft Office | 3 | 0 | 2 | 1 | 0 | 0 | KB5002756 |
| Dynamics 365 | 2 | 0 | 0 | 0 | 2 | 0 | KB5064483 |
| Priority | Update | Type | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|---|
| Urgent | KB5063878 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more |
Security | Aug 12, 2025 | 61 | None | 0.5162 | 9.8 |
| Urgent | KB5064010 Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 and 1 more |
ServicingStack | Aug 12, 2025 | 61 | None | 0.5162 | 9.8 |
| Urgent | KB5063899 Windows Server 2022, 23H2 Edition (Server Core installation) |
ServicingStack | Aug 12, 2025 | 57 | None | 0.5162 | 9.8 |
| Urgent | KB5063812 Windows Server 2022, Windows Server 2022 (Server Core installation) |
ServicingStack | Aug 12, 2025 | 56 | None | 0.5162 | 9.8 |
| Urgent | KB5063880 Windows Server 2022, Windows Server 2022 (Server Core installation) |
ServicingStack | Aug 12, 2025 | 56 | None | 0.5162 | 9.8 |
| Urgent | KB5063877 Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more |
Security | Aug 12, 2025 | 54 | None | 0.5162 | 9.8 |
| Urgent | KB5063871 Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more |
Security | Aug 12, 2025 | 48 | None | 0.5162 | 9.8 |
| Urgent | KB5063950 Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) |
Security | Aug 12, 2025 | 47 | None | 0.5162 | 9.8 |
| Urgent | KB5063875 Windows 11 Version 22H2 for ARM64-based Systems, Windows 11 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems and 1 more |
Security | Aug 12, 2025 | 47 | None | 0.5162 | 9.8 |
| Urgent | KB5063906 Windows Server 2012, Windows Server 2012 (Server Core installation) |
Security | Aug 12, 2025 | 46 | None | 0.5162 | 9.8 |
| Urgent | KB5063709 Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more |
Security | Aug 12, 2025 | 44 | None | 0.5162 | 9.8 |
| Urgent | KB5063927 Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
Security | Aug 12, 2025 | 38 | None | 0.5162 | 9.8 |
| Urgent | KB5063947 Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
Security | Aug 12, 2025 | 38 | None | 0.5162 | 9.8 |
| Urgent | KB5063889 Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems |
Security | Aug 12, 2025 | 36 | None | 0.5162 | 9.8 |
| Urgent | KB5063888 Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more |
Security | Aug 12, 2025 | 34 | None | 0.5162 | 9.8 |
| Urgent | KB5063948 Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more |
Security | Aug 12, 2025 | 34 | None | 0.5162 | 9.8 |
| Urgent | KB5002769 Microsoft SharePoint Server 2019 |
Security | Aug 12, 2025 | 4 | None | 0.2133 | 8.8 |
| Urgent | KB5002771 Microsoft SharePoint Enterprise Server 2016 |
Security | Aug 12, 2025 | 4 | None | 0.2133 | 8.8 |
| Urgent | KB5047155 Microsoft Exchange Server Subscription Edition RTM |
Security | Aug 12, 2025 | 1 | None | 0.0759 | 8.0 |
| Urgent | KB5050672 Microsoft Exchange Server 2019 Cumulative Update 15 |
Security | Aug 12, 2025 | 1 | None | 0.0759 | 8.0 |
| Urgent | KB5050673 Microsoft Exchange Server 2019 Cumulative Update 14 |
Security | Aug 12, 2025 | 1 | None | 0.0759 | 8.0 |
| Urgent | KB5050674 Microsoft Exchange Server 2016 Cumulative Update 23 |
Security | Aug 12, 2025 | 1 | None | 0.0759 | 8.0 |
| Urgent | KB5002756 Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition) |
Security | Aug 18, 2025 | 2 | None | 0.0057 | 8.4 |
| High | KB5002773 Microsoft SharePoint Server Subscription Edition |
Security | Aug 12, 2025 | 1 | None | 0.2061 | 7.1 |
| High | KB5063756 Microsoft SQL Server 2022 for x64-based Systems (GDR) |
Security | Aug 12, 2025 | 5 | None | 0.0177 | 8.8 |
| High | KB5063814 Microsoft SQL Server 2022 for x64-based Systems (CU 20) |
Security | Aug 12, 2025 | 5 | None | 0.0177 | 8.8 |
| High | KB5063757 Microsoft SQL Server 2019 for x64-based Systems (CU 32) |
Security | Aug 12, 2025 | 4 | None | 0.0177 | 8.8 |
| High | KB5063758 Microsoft SQL Server 2019 for x64-based Systems (GDR) |
Security | Aug 12, 2025 | 4 | None | 0.0177 | 8.8 |
| High | KB5063759 Microsoft SQL Server 2017 for x64-based Systems (CU 31) |
Security | Aug 12, 2025 | 4 | None | 0.0177 | 8.8 |
| High | KB5063760 Microsoft SQL Server 2017 for x64-based Systems (GDR) |
Security | Aug 12, 2025 | 4 | None | 0.0177 | 8.8 |
| High | KB5063761 Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack |
Security | Aug 12, 2025 | 4 | None | 0.0177 | 8.8 |
| High | KB5063762 Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) |
Security | Aug 12, 2025 | 4 | None | 0.0177 | 8.8 |
| High | KB5063221 Microsoft Exchange Server 2019 Cumulative Update 15 |
Security | Aug 12, 2025 | 4 | None | 0.0145 | 7.5 |
| High | KB5063222 Microsoft Exchange Server 2019 Cumulative Update 14 |
Security | Aug 12, 2025 | 4 | None | 0.0145 | 7.5 |
| High | KB5063223 Microsoft Exchange Server 2016 Cumulative Update 23 |
Security | Aug 12, 2025 | 4 | None | 0.0145 | 7.5 |
| High | KB5063224 Microsoft Exchange Server Subscription Edition RTM |
Security | Aug 12, 2025 | 4 | None | 0.0145 | 7.5 |
| High | KB5002765 Microsoft PowerPoint 2016 (32-bit edition), Microsoft PowerPoint 2016 (64-bit edition) |
Security | Aug 12, 2025 | 1 | None | 0.0053 | 7.8 |
| Routine | KB5064483 Microsoft Dynamics 365 (on-premises) version 9.1 |
Security | Aug 12, 2025 | 1 | None | 0.0127 | 6.5 |
| Routine | KB5059086 Microsoft Dynamics 365 (on-premises) version 9.1 |
Security | Aug 12, 2025 | 1 | None | 0.0058 | 5.4 |
macOS
| Priority | Apple update | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|
| Patch now | Sequoia 15.6.1 Sequoia |
Aug 20, 2025 | 1 | KEV1 | 0.6516 | 10.0 |
| Patch now | Sonoma 14.7.8 Sonoma |
Aug 20, 2025 | 1 | KEV1 | 0.6516 | 10.0 |
| Patch now | Ventura 13.7.8 Ventura |
Aug 20, 2025 | 1 | KEV1 | 0.6516 | 10.0 |
| Distribution | Fixes | CVEs fixed | Closing exploited CVEs | Patch now |
|---|---|---|---|---|
| Ubuntu | 441 | 86 | ||
| Debian | 350 | 329 | ||
| Red Hat | 76 | 108 | 2 | 2 |
Highest priority this month
| Priority | Fix | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|
| Patch now | RHSA-2025:13780 webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc and 1 more on RHEL 8 |
Aug 13, 2025 | 9 | KEV1 | 0.1093 | 8.8 |
| Patch now | RHSA-2025:13782 webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc and 1 more on RHEL 9 |
Aug 13, 2025 | 9 | KEV1 | 0.1093 | 8.8 |
| Urgent | DLA-4263-1 ruby-graphql on Debian 11.6 (bullseye) |
Aug 4, 2025 | 1 | None | 0.0310 | 9.0 |
| Urgent | DLA-4274-2 mbedtls on Debian 11.6 (bullseye) |
Aug 30, 2025 | 1 | None | 0.0244 | 9.8 |
| Urgent | DLA-4265-1 modsecurity-crs on Debian 11.6 (bullseye) |
Aug 8, 2025 | 1 | None | 0.0141 | 9.8 |
| Urgent | DEBIAN-CVE-2025-53853 biosig on Debian 14 |
Aug 25, 2025 | 1 | None | 0.0093 | 9.8 |
| Urgent | DEBIAN-CVE-2025-53511 biosig on Debian 14 |
Aug 25, 2025 | 1 | None | 0.0093 | 9.8 |
| Urgent | DEBIAN-CVE-2025-46411 biosig on Debian 14 |
Aug 25, 2025 | 1 | None | 0.0088 | 9.8 |
| Urgent | DEBIAN-CVE-2025-53518 biosig on Debian 14 |
Aug 25, 2025 | 1 | None | 0.0086 | 9.8 |
| Urgent | DEBIAN-CVE-2025-54462 biosig on Debian 14 |
Aug 25, 2025 | 1 | None | 0.0074 | 9.8 |
Patch Tuesday, month by month
CVEs Microsoft released on each Patch Tuesday, counted by original release date and excluding Azure Linux, the same way the industry trackers count. Select a bar to see that month above.
Show as a table
| Month | CVEs | Critical | Security updates | Exploited at release | Write-up |
|---|---|---|---|---|---|
| Oct 2026 | 1,420 | 80 | 51 | 1 | Read |
| Sep 2026 | 1,004 | 113 | 57 | 2 | Read |
| Aug 2026 | 710 | 84 | 58 | 1 | Read |
| Jul 2026 | 574 | 57 | 56 | 3 | Read |
| Jun 2026 | 246 | 30 | 28 | 0 | Read |
| May 2026 | 114 | 15 | 40 | 0 | Read |
| Apr 2026 | 176 | 7 | 50 | 2 | Read |
| Mar 2026 | 78 | 3 | 39 | 0 | Read |
| Feb 2026 | 53 | 2 | 29 | 6 | Read |
| Jan 2026 | 116 | 8 | 26 | 1 | Read |
| Dec 2025 | 72 | 0 | 29 | 1 | Read |
| Nov 2025 | 64 | 4 | 31 | 1 | None |
Third-party apps
Apps with vulnerabilities published, or added to CISA's Known Exploited Vulnerabilities catalog, in the last 90 days. Most urgent first. Updating to the latest version covers every vulnerability counted here.
Windows apps
All Windows app fixesThe 50 most urgent of 488 apps.
macOS apps
13 apps.
| Priority | App | Latest version | CVEs | Exploited | Max EPSS | Max CVSS | Most urgent fix |
|---|---|---|---|---|---|---|---|
| Patch now | Microsoft Edge Microsoft |
157.0.4341.42 | 1,239 | KEV3 | 0.0981 | 9.8 | Microsoft Edge 154.0.4258.62 |
| Patch now | Google Chrome Google |
157.0.8103.39 | 1,442 | KEV2 | 0.0351 | 9.8 | Google Chrome 153.0.8010.37 |
| Urgent | Microsoft Visual Studio Code Microsoft |
1.145.1 | 30 | None | 0.0106 | 9.6 | Microsoft Visual Studio Code 1.133.0 |
| Urgent | Mozilla Thunderbird Mozilla |
159.0 | 236 | None | 0.0072 | 10.0 | Mozilla Thunderbird 154.0 |
| Urgent | Mozilla Firefox Mozilla |
159.0.1 | 230 | None | 0.0072 | 10.0 | Mozilla Firefox 153.5.0 |
| Urgent | PyCharm JetBrains |
2026.3 | 4 | None | 0.0029 | 9.0 | PyCharm 2026.2.4 |
| Urgent | WebStorm JetBrains |
2026.3 | 2 | None | 0.0029 | 9.0 | WebStorm 2026.2.4 |
| High | Docker Desktop Docker |
4.98.0 | 2 | None | 0.0044 | 7.8 | Docker Desktop 4.86.0 |
| High | VLC media player VideoLAN |
3.0.24 | 2 | None | 0.0024 | 7.3 | VLC media player 3.0.24 |
| High | Parallels Desktop Parallels |
27.1.0 | 1 | None | 0.0017 | 7.8 | Parallels Desktop 26.4.1 |
| Routine | Microsoft Defender Microsoft |
101.26092.0012 | 1 | None | 0.0048 | 5.5 | Microsoft Defender 101.26042.0020 |
| Routine | OneDrive Microsoft |
26.189.0928 | 1 | None | 0.0039 | 6.7 | OneDrive 26.098.0524 |
| Routine | KeePassXC KeePassXC |
2.8.0 | 2 | None | 0.0014 | 4.3 | KeePassXC 2.8.0 |
All fixes
One row per thing you install: a Microsoft KB, an app version, a macOS update or a Linux advisory. Sorted by priority, then by exploited CVEs closed, then by highest EPSS.
| Priority | Fix | Platform | Released | CVEs | Exploited | Max EPSS | Max CVSS |
|---|---|---|---|---|---|---|---|
| Patch now | Google Chrome 156.0.8078.80
Google Chrome |
Windows apps | Oct 29, 2026 | 204 | KEV4 | 0.5496 | 9.8 |
| Patch now | Google Chrome Beta 158.0.8127.2
Google Chrome Beta |
Windows apps | Oct 28, 2026 | 201 | KEV4 | 0.5496 | 9.8 |
| Patch now | Google Chrome Dev 159.0.8130.0
Google Chrome Dev |
Windows apps | Oct 30, 2026 | 174 | KEV3 | 0.1374 | 9.8 |
| Patch now | RHSA-2026:87080
apcu-panel, libzip, libzip-devel and 34 more on RHEL 8 |
Linux | Oct 24, 2026 | 12 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87071
php8.4 on RHEL 10 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87079
apcu-panel, php-pecl-apcu, php-pecl-apcu-devel and 4 more on RHEL 9 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87151
php, php-bcmath, php-cli and 22 more on RHEL 9 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:87073
php-pecl-xdebug3 on RHEL 8 |
Linux | Oct 24, 2026 | 3 | KEV2 | 1.0000 | 9.8 |
| Patch now | RHSA-2026:88561
php on RHEL 10 |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | libapache2-mod-php8.3 8.3.6-0ubuntu0.24.04.13
libapache2-mod-php8.3 on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | libphp8.3-embed 8.3.6-0ubuntu0.24.04.13
libphp8.3-embed on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3 8.3.6-0ubuntu0.24.04.13
php8.3 on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-bcmath 8.3.6-0ubuntu0.24.04.13
php8.3-bcmath on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-bz2 8.3.6-0ubuntu0.24.04.13
php8.3-bz2 on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-cgi 8.3.6-0ubuntu0.24.04.13
php8.3-cgi on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-cli 8.3.6-0ubuntu0.24.04.13
php8.3-cli on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-common 8.3.6-0ubuntu0.24.04.13
php8.3-common on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-curl 8.3.6-0ubuntu0.24.04.13
php8.3-curl on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-dba 8.3.6-0ubuntu0.24.04.13
php8.3-dba on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-enchant 8.3.6-0ubuntu0.24.04.13
php8.3-enchant on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-fpm 8.3.6-0ubuntu0.24.04.13
php8.3-fpm on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-gd 8.3.6-0ubuntu0.24.04.13
php8.3-gd on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-gmp 8.3.6-0ubuntu0.24.04.13
php8.3-gmp on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-imap 8.3.6-0ubuntu0.24.04.13
php8.3-imap on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
| Patch now | php8.3-interbase 8.3.6-0ubuntu0.24.04.13
php8.3-interbase on Ubuntu 24.04.5 LTS (noble) |
Linux | Oct 24, 2026 | 2 | KEV2 | 1.0000 | 9.8 |
How priority is set
Four tiers with published rules, the same rules the Patchblox Vulnerability Hub uses. A fix takes the highest tier of any CVE it closes.
Exploited in the wild: the vendor reports exploitation, or the CVE is in CISA's Known Exploited Vulnerabilities catalog.
The vendor rates exploitation as more likely, or rates the CVE Critical.
CVSS 7.0 or higher, or rated High by the vendor when no CVSS score is published.
Everything else. Still worth installing on your normal schedule.
EPSS is shown as context and breaks ties within a tier. It does not move a CVE between tiers: a probability model should not outrank a confirmed exploitation report.
Where the data comes from
This list is everyone's. Yours is shorter.
The tracker tells you what's exploited and what fixes it. Patchblox tells you which of your machines are still exposed, on every platform, and deploys the fix on Windows and Linux.
- Works from the Intune, Entra and Azure Update Manager data you already have
- Matches every installed app and OS build to the fix that closes its CVEs
- Deploys through rings with validation, then confirms the exposure closed