Microsoft Patch Tuesday for August 2025 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-48807 | Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally | 6.7 | <1% | ||
CVE-2025-53781+1 related CVE | Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network | 6.5 group max | 1% | ||
| CVE-2025-50165 | Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network | 9.8 | 10% | ||
| CVE-2025-50176 | Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally | 7.8 | <1% | ||
CVE-2025-53778+1 related CVE | Improper Authentication in Microsoft Windows NTLM Enables Privilege Escalation | 8.8 group max | 39% | ||
CVE-2025-53731+3 related CVEs | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | 8.4 | <1% | ||
| CVE-2025-53766 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network | 9.8 | 7% | ||
| CVE-2025-53793 | Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network | 7.5 | 1% |
From the original article
6 min read at blog.talosintelligence.com
Microsoft has released its monthly security update for August 2025, which includes 111 vulnerabilities affecting a range of products, including 13 that Microsoft marked as “critical”. In this month's release, Microsoft observed none of the included vulnerabilities being actively exploited in the wild.
By Vanja Svajcer · blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.