Vulnerabilitycritical
Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-24054 | NTLM Hash Disclosure Spoofing Vulnerability in Microsoft Windows | 5.4 | 62% | KEVPoC ×3 | KEV |
| CVE-2025-30388 | Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally | 7.8 | 4% | ||
CVE-2025-50177+1 related CVE | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network | 8.1 group max | 4% | ||
| CVE-2025-50165 | Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network | 9.8 | 10% | ||
| CVE-2025-50176 | Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally | 7.8 | <1% | ||
| CVE-2025-53766 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network | 9.8 | 7% | ||
| CVE-2025-53767 | Azure OpenAI Elevation of Privilege Vulnerability | 10.0 | 1% | ||
| CVE-2025-53779 | Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network | 7.2 | 3% | ||
| CVE-2025-53786 | On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix | 8.0 | 7% | ||
| CVE-2025-53787 | Microsoft 365 Copilot BizChat Information Disclosure Vulnerability | 7.5 | <1% | ||
| CVE-2025-53792 | Azure Portal Elevation of Privilege Vulnerability | 9.1 | <1% |
From the original article
5 min read at thehackernews.com
Microsoft on Tuesday rolled out fixes for a massive set of 111 security flaws across its software portfolio, including one flaw that has been disclosed as publicly known at the time of the release. Of the 111 vulnerabilities, 16 are rated Critical, 92 are rated Important, two are rated Moderate, and one is rated Low in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.