Microsoft’s Patch Tuesday fixes 175 vulnerabilities, including two actively exploited zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-59287+2 related CVEs | Deserialization RCE in Microsoft WSUS (Windows Server) | 9.8 group max | 100% | KEVPoC | KEV |
| CVE-2025-49708 | Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network | 9.9 | 1% | ||
| CVE-2025-55315 | HTTP Request Smuggling in Microsoft ASP.NET Core Enables Security Feature Bypass | 9.9 | 66% | ||
| CVE-2025-59246 | Azure Entra ID Elevation of Privilege Vulnerability | 9.8 | 8% |
From the original article
3 min read at cyberscoop.com
The tech giant addressed a record-high number of defects for the year in its latest update. Microsoft addressed 175 vulnerabilities affecting its core products and underlying systems, including two actively exploited zero-days, the company said in its latest security update . It’s the largest assortment of defects disclosed by the tech giant this year.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.