What was in the June 2025 Microsoft Patch Tuesday?

Microsoft released 47 updates fixing 57 CVEs in June 2025, of which 2 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › June 2025

Microsoft Patch Tuesday, June 2025

Released June 10, 2025 · data last refreshed 2026-08-01

Microsoft's June 2025 security release, published June 10, 2025: 47 updates fixing 57 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 1 CVE from this release is on the Senserva hot list today (as of 2026-08-10), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.

Updates (KBs)

CVEs fixed

Actively exploited

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-33053Internet Shortcut Files Remote Code Execution VulnerabilityCVSS 8.8Exploited

CVE-2025-33073Windows SMB Client Elevation of Privilege VulnerabilityCVSS 8.8Exploited Hot now

CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityCVSS 7.5Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-33064Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-33066Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29964Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29966Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29967Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29962Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29963Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-47163Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-47166Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-47172Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows Server 2019 (14)Windows Server 2022 (10)Microsoft Office 2019 for 32-bit editions (9)Windows 10 Version 1809 for 32-bit Systems (7)Windows 10 Version 1809 for x64-based Systems (7)Windows Server 2019 (Server Core installation) (7)Microsoft SharePoint Enterprise Server 2016 (6)Microsoft SharePoint Server 2019 (6)Microsoft Office 2019 for 64-bit editions (6)Microsoft 365 Apps for Enterprise for 32-bit Systems (4)

Take this release to your AI

Composed from the June 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the June 2025 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2025-06, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 47 updates (KBs) fixing 57 CVEs, 2 actively exploited (CISA KEV), 0 ransomware-linked, 0 Critical updates.
Actively exploited CVEs: CVE-2025-33053 (CVSS 8.8), CVE-2025-33073 (CVSS 8.8), CVE-2025-30400 (CVSS 7.8), CVE-2025-32701 (CVSS 7.8), CVE-2025-32706 (CVSS 7.8), CVE-2025-32709 (CVSS 7.8), CVE-2025-30397 (CVSS 7.5).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← May 2025 July 2025 →