Microsoft Patch Tuesday, July 2025 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-47178 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to… | 8.0 | 3% | ||
CVE-2025-47981+1 related CVE | Unauthenticated Heap Buffer Overflow RCE in Windows SPNEGO (CVE-2025-47981) | 9.8 group max | 41% | PoC ×3 | |
CVE-2025-49695+3 related CVEs | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | 8.4 group max | <1% | ||
| CVE-2025-49719 | Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network | 7.5 | 11% |
From the original article
3 min read at krebsonsecurity.comMicrosoft today released updates to fix at least 137 security vulnerabilities in its Windows operating systems and supported software. None of the weaknesses addressed this month are known to be actively exploited, but 14 of the flaws earned Microsoft’s most-dire “critical” rating, meaning they could be exploited to seize control over vulnerable Windows PCs with little or no help from users.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.