What was in the June 2025 Microsoft Patch Tuesday?

Microsoft released 31 updates fixing 99 CVEs in June 2025, of which 7 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › June 2025

Please link to this page, it changes often. Thank you! The Senserva Team.

Microsoft Patch Tuesday, June 2025

Released June 10, 2025 · data last refreshed 2026-07-09

Microsoft's June 2025 security release, published June 10, 2025: 31 updates fixing 99 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Updates (KBs)

CVEs fixed

Actively exploited

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2025-33053Internet Shortcut Files Remote Code Execution VulnerabilityCVSS 8.8Exploited

CVE-2025-33073Windows SMB Client Elevation of Privilege VulnerabilityCVSS 8.8Exploited

CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVSS 7.8Exploited

CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityCVSS 7.5Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2025-33064Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-33066Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29964Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29966Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29967Remote Desktop Client Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29962Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-29963Windows Media Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-47163Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-47166Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 8.8

CVE-2025-47172Microsoft SharePoint Server Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows Server 2019 (14)Windows Server 2022 (10)Microsoft Office 2019 for 32-bit editions (9)Windows 10 Version 1809 for 32-bit Systems (7)Windows 10 Version 1809 for x64-based Systems (7)Windows Server 2019 (Server Core installation) (7)Microsoft SharePoint Enterprise Server 2016 (6)Microsoft SharePoint Server 2019 (6)Microsoft Office 2019 for 64-bit editions (6)Microsoft 365 Apps for Enterprise for 32-bit Systems (4)

Take this release to your AI

Composed from the June 2025 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the June 2025 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2025-06, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 31 updates (KBs) fixing 99 CVEs, 7 actively exploited (CISA KEV), 0 ransomware-linked, 0 Critical updates.
Actively exploited CVEs: CVE-2025-33053 (CVSS 8.8), CVE-2025-33073 (CVSS 8.8), CVE-2025-30400 (CVSS 7.8), CVE-2025-32701 (CVSS 7.8), CVE-2025-32706 (CVSS 7.8), CVE-2025-32709 (CVSS 7.8), CVE-2025-30397 (CVSS 7.5).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← May 2025 July 2025 →