Vulnerabilitycritical
August 2025 Patch Tuesday fixes a Windows Kerberos Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-53766 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network | 9.8 | 7% | ||
| CVE-2025-53779 | Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network | 7.2 | 3% |
From the original article
1 min read at securityaffairs.com
Microsoft Patch Tuesday security updates for August 2025 fixed 107 flaws, including a publicly disclosed Windows Kerberos zero-day. Microsoft Patch Tuesday security updates for August 2025 fixed 107 vulnerabilities in Windows and Windows Components, Office and Office Components, Microsoft Edge (Chromium-based), Azure, GitHub Copilot, Dynamics 365, SQL Server, and Hyper-V Server.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.