Vulnerabilitycritical
Microsoft Patch Tuesday, August 2025 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-50165 | Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network | 9.8 | 10% | ||
| CVE-2025-53733 | Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally | 8.4 | <1% | ||
| CVE-2025-53766 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network | 9.8 | 7% | ||
| CVE-2025-53778 | Improper Authentication in Microsoft Windows NTLM Enables Privilege Escalation | 8.8 | 39% | ||
| CVE-2025-53779 | Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network | 7.2 | 3% | ||
| CVE-2025-53786 | On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix | 8.0 | 7% |
From the original article
4 min read at krebsonsecurity.comMicrosoft today released updates to fix more than 100 security flaws in its Windows operating systems and other software. At least 13 of the bugs received Microsoft’s most-dire “critical” rating, meaning they could be abused by malware or malcontents to gain remote access to a Windows system with little or no help from users.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.